[CVE-2013-0334] Ruby dependency manager Bundler may install gems from a different source than expected

Debian Bug report logs - #762739
[CVE-2013-0334] Ruby dependency manager Bundler may install gems from a different source than expected

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Luciano Bello <luciano@debian.org>

To: submit@bugs.debian.org

Subject: [CVE-2013-0334] Ruby dependency manager Bundler may install gems from a different source than expected

Date: Wed, 24 Sep 2014 22:25:40 +0200

Package: bundler
Version: 1.1.4-6
Severity: important
Tags: security upstream patch fixed-upstream

Hi there,
    the following vulnerability was published for bundler:

CVE-2013-0334: Ruby dependency manager Bundler may install gems from a different 
source than expected

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

http://www.openwall.com/lists/oss-security/2014/09/24/9
http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html

Please adjust the affected versions in the BTS as needed.

Regards, luciano	

Message #14 received at 762739-close@bugs.debian.org (full text, mbox, reply):

From: Christian Hofstaedtler <zeha@debian.org>

To: 762739-close@bugs.debian.org

Subject: Re: #762739: CVE-2013-0334

Date: Sun, 1 May 2016 23:27:53 +0200

Closing, given a fixed bundler is in stable and newer.

Thanks,
-- 
 ,''`.  Christian Hofstaedtler <zeha@debian.org>
: :' :  Debian Developer
`. `'   7D1A CFFA D9E0 806C 9C4C  D392 5C13 D6DB 9305 2E03
  `-

Send a report that this bug log contains spam.