Skip to content

Commit 6e77ace

Browse files
committed
Version 2.6.13 with changelog
1 parent db04887 commit 6e77ace

File tree

2 files changed

+15
-1
lines changed

2 files changed

+15
-1
lines changed

History.txt

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,19 @@
11
# coding: UTF-8
22

3+
=== 2.6.13 / 2017-08-27
4+
5+
Security fixes:
6+
7+
* Fix a DNS request hijacking vulnerability.
8+
Fix by Samuel Giddins.
9+
* Fix an ANSI escape sequence vulnerability.
10+
Fix by Evan Phoenix.
11+
* Fix a DOS vulernerability in the `query` command.
12+
Fix by Samuel Giddins.
13+
* Fix a vulnerability in the gem installer that allowed
14+
a malicious gem to overwrite arbitrary files.
15+
Fix by Samuel Giddins.
16+
317
=== 2.6.12 / 2017-04-30
418

519
Bug fixes:

lib/rubygems.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
require 'thread'
1111

1212
module Gem
13-
VERSION = "2.6.12"
13+
VERSION = "2.6.13"
1414
end
1515

1616
# Must be first since it unloads the prelude from 1.9.2

0 commit comments

Comments
 (0)