[#106355] [Ruby master Bug#18373] RBS build failure: '/include/x86_64-linux/ruby/config.h', needed by 'constants.o'. — "vo.x (Vit Ondruch)" <noreply@...>
Issue #18373 has been reported by vo.x (Vit Ondruch).
28 messages
2021/12/01
[ruby-core:106811] [Ruby master Bug#18431] Ruby 2.6.9, bundler 1.17.2 and CVE-2021-43809
From:
"npic1 (Nat Pic1)" <noreply@...>
Date:
2021-12-24 15:00:17 UTC
List:
ruby-core #106811
Issue #18431 has been reported by npic1 (Nat Pic1). ---------------------------------------- Bug #18431: Ruby 2.6.9, bundler 1.17.2 and CVE-2021-43809 https://bugs.ruby-lang.org/issues/18431 * Author: npic1 (Nat Pic1) * Status: Open * Priority: Normal * Backport: 2.6: UNKNOWN, 2.7: UNKNOWN, 3.0: UNKNOWN ---------------------------------------- Hi, Ruby 2.6.9 ships with bundler 1.17.2, which is affected by CVE-2021-43809. Is there a plan to upgrade it to resolve the issue? I saw that in the past, there was an upgrade and then a downgrade because of some issue: https://git.ruby-lang.org/ruby.git/commit/?id=91533d9ab17a08385381d87991e01e8674e069a1 Thanks a lot, Regards Nat -- https://bugs.ruby-lang.org/ Unsubscribe: <mailto:ruby-core-request@ruby-lang.org?subject=unsubscribe> <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>