gpp_maybe Security update for rubygem-bundler

SUSE-SLE-Module-Basesystem-15-SP7-2026-1355

This update for rubygem-bundler fixes the following issues: Updated to version 2.2.34. - CVE-2020-36327: Bundler chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen (bsc#1185842) - CVE-2021-43809: rubygem-bundler: remote execution via Gemfile argument injection (bsc#1193578)

• Release Date
  Apr 15 2026
• References
  Bugzilla: 1185842, 1193578
  CVEs: CVE-2020-36327, CVE-2021-43809
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  ruby2.5-rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock rpm

  rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock src

Basesystem Module 15.7 x86_64

• Packages
  ruby2.5-rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock rpm

  rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock src

Basesystem Module 15.7 ppc64le

• Packages
  ruby2.5-rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock rpm

  rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock src

Basesystem Module 15.7 aarch64

• Packages
  ruby2.5-rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock rpm

  rubygem-bundler
  The best way to manage your application's dependencies

  2.2.34-150700.21.3.1 lock src