Bundler: Bundler may install gems from a different source than expected (CVE-2013-0334)
Versions Affected: All versions < 1.7.0 Not Affected: Any Gemfile with one or zero sources Fixed Versions: 1.7.0 Releases: 1.7.0 Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Impact Any Gemfile with multiple top-level source lines canno
The New Rubygems Index Format
28 Mar 2014 The New Rubygems Index FormatThis post is a part news, part technical documentation, and part request for comment. I’m going to explain the technical nitty-gritty details of the planned next generation index that allows Bundler and Rubygems to know what gems exist and how to install them. The current index is a mishmash of different files that were created at different times to serve d
The rumors of Bundler's death have been greatly exaggerated
07 Dec 2013 The rumors of Bundler's death have been greatly exaggeratedSo this week there was some excitement on Github, Hacker News, and Ruby Weekly about the news that Bundler will (eventually) be merged into Rubygems. Before that comment, which was a side point on a different topic, the idea of merging the two projects had not been announced or explained. As lead of the Bundler project, I’d lik
therubyracer 0.11.0 å•é¡Œã¾ã¨ã‚ - suu-g's diary
Rails 3.1 以é™ã§è‰¯ã使ã‚れるよã†ã«ãªã£ãŸ therubyracer ã§ã™ãŒã€æœ€è¿‘ã€ã“れをå«ã‚€ bundle install ãŒã‚„ãŸã‚‰ã¨æ™‚é–“ãŒã‹ã‹ã£ãŸã‚Šã€ã‚ã‚‹ã„ã¯ãã‚‚ãも失敗ã—ã¦ã—ã¾ã†ã€ã¨ã„ã†äº‹è±¡ãŒå¤šæ•°å ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ 解決方法 以下ã®ä¸‰ã¤ã®æ–¹æ³•ãŒåŸºæœ¬çš„ãªè§£æ±ºæ–¹æ³•ã§ã™ã€‚ ãã®0 （※ 2013/1/11 追記） Gemfile ã«ã¦ã€libv8 3.11 系を使用ã™ã‚‹ã“ã¨ã‚’明記ã—ã¾ã™*1 *2 gem 'therubyracer', '0.11.1' gem 'libv8', '~> 3.11.8.13' ãã®1 Gemfile ã«ã¦ã€ therubyracer ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ 0.11.0beta8 ã«æˆ»ã—ã¾ã™ gem 'therubyracer', '0.11.0beta8' gem 'libv8' ãã®2 Gemfile ã«ã¦ã€ therubyracer ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ 0
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Post-Mortem of Today's Connectivity Issues - RubyGems Blog
The New Rubygems Index Format
Rails Assets
2.1.5 Released - RubyGems Blog
2.1.0 installing java gem on MRI · Issue #638 · rubygems/rubygems
v2.1.0 installs windows version to joyent smartos(solaris) · Issue #639 · rubygems/rubygems
hone.heroku.com | Rubygems and the Dependency API
Cloud Package Repository
{{#tags}}- {{label}}
{{/tags}}