Skip to content

Instantly share code, notes, and snippets.

@pthrasher
Created September 16, 2011 20:57
Show Gist options
  • Save pthrasher/1223134 to your computer and use it in GitHub Desktop.
Save pthrasher/1223134 to your computer and use it in GitHub Desktop.
hiro:~ pthrasher$ sudo gem update --system
Updating RubyGems
Updating rubygems-update
Successfully installed rubygems-update-1.8.10
Updating RubyGems to 1.8.10
Installing RubyGems 1.8.10
Invalid gemspec in [/Library/Ruby/Gems/1.8/specifications/json-1.6.0.gemspec]: invalid date format in specification: "2011-09-12 00:00:00.000000000Z"
Invalid gemspec in [/Library/Ruby/Gems/1.8/specifications/json-1.6.0.gemspec]: invalid date format in specification: "2011-09-12 00:00:00.000000000Z"
RubyGems 1.8.10 installed
Invalid gemspec in [/Library/Ruby/Gems/1.8/specifications/json-1.6.0.gemspec]: invalid date format in specification: "2011-09-12 00:00:00.000000000Z"
== 1.8.10 / 2011-08-25
RubyGems 1.8.10 contains a security fix that prevents malicious gems from
executing code when their specification is loaded. See
https://github.com/rubygems/rubygems/pull/165 for details.
* 5 bug fixes:
* RubyGems escapes strings in ruby-format specs using #dump instead of #to_s
and %q to prevent code injection. Issue #165 by Postmodern
* RubyGems attempt to activate the psych gem now to obtain bugfixes from
psych.
* Gem.dir has been restored to the front of Gem.path. Fixes remaining
problem with Issue #115
* Fixed Syck DefaultKey infecting ruby-format specifications.
* `gem uninstall a b` no longer stops if gem "a" is not installed.
------------------------------------------------------------------------------
RubyGems installed the following executables:
/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/bin/gem
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment