Bundler: Bundler may install gems from a different source than expected (CVE-2013-0334)
Versions Affected: All versions < 1.7.0 Not Affected: Any Gemfile with one or zero sources Fixed Versions: 1.7.0 Releases: 1.7.0 Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Impact Any Gemfile with multiple top-level source lines canno
The New Rubygems Index Format
28 Mar 2014 The New Rubygems Index Format This post is a part news, part technical documentation, and part request for comment. I’m going to explain the technical nitty-gritty details of the planned next generation index that allows Bundler and Rubygems to know what gems exist and how to install them. The current index is a mishmash of different files that were created at different times to serve
The rumors of Bundler’s death have been greatly exaggerated
07 Dec 2013 The rumors of Bundler's death have been greatly exaggerated So this week there was some excitement on Github, Hacker News, and Ruby Weekly about the news that Bundler will (eventually) be merged into Rubygems. Before that comment, which was a side point on a different topic, the idea of merging the two projects had not been announced or explained. As lead of the Bundler project, I’d li
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
The New Rubygems Index Format
hone.heroku.com | Rubygems and the Dependency API
