| Name: | rubygem-bundler |
|---|---|
| Version: | 2.3.27 |
| Release: | 145.module+el9.5.0+90461+45a3a727 |
| Architecture: | noarch |
| Module: | ruby:3.1:9050020241206061509:9 |
| Group: | Unspecified |
| Size: | 1402935 |
| License: | MIT |
| RPM: | rubygem-bundler-2.3.27-145.module+el9.5.0+90461+45a3a727.noarch.rpm |
| Source RPM: | ruby-3.1.5-145.module+el9.5.0+90461+45a3a727.src.rpm |
| Build Date: | Fri Dec 06 2024 |
| Build Host: | build-ol9-x86_64.oracle.com |
| Vendor: | Oracle America |
| URL: | https://www.ruby-lang.org/ |
| Summary: | Library and utilities to manage a Ruby application's gem dependencies |
| Description: | Bundler manages an application's dependencies through its entire life, across many machines, systematically and repeatably. |
- Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68530
- Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871
- Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613
- Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590