archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-09-15 08:33:58 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Merge rubygems-2.6.14 changes.

Browse source 
It fixed http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60149 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
hsbt 2017-10-10 08:58:22 +00:00
parent 6d86ee593a
commit 500f15e507
6 changed files with 55 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/rubygems/package/old.rb
View file

@ -101,7 +101,7 @@ class Gem::Package::Old < Gem::Package
header << line
end
YAML.load header
Gem::SafeYAML.safe_load header
end
##