< back to search

gpp_maybe Security update for rubygem-bundler
SUSE-SLE-Module-Basesystem-15-SP6-2025-1294

This update for rubygem-bundler fixes the following issues: - CVE-2020-36327: Fixed bundler choosing a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen (bsc#1185842) Other fixes: - Updated to version 2.2.34

  • Release Date
    Apr 16 2025
  • References
    Bugzilla: 1185842
    CVEs: CVE-2020-36327
  • Type
    security
  • Severity
    important

cloud_download Downloads

Basesystem Module 15.6 ppc64le
  • Packages
    ruby2.5-rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock rpm
    rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock src
Basesystem Module 15.6 aarch64
  • Packages
    ruby2.5-rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock rpm
    rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock src
Basesystem Module 15.6 s390x
  • Packages
    ruby2.5-rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock rpm
    rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock src
Basesystem Module 15.6 x86_64
  • Packages
    ruby2.5-rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock rpm
    rubygem-bundler
    The best way to manage your application's dependencies
    2.2.34-150000.3.11.1 lock src