1. 12 Mar, 2014 1 commit
  2. 11 Mar, 2014 1 commit
  3. 26 Feb, 2014 7 commits
  4. 25 Feb, 2014 2 commits
  5. 24 Feb, 2014 10 commits
  6. 18 Feb, 2014 2 commits
  7. 17 Feb, 2014 2 commits
  8. 14 Feb, 2014 3 commits
  9. 10 Feb, 2014 7 commits
  10. 09 Feb, 2014 4 commits
  11. 07 Feb, 2014 1 commit
    • Install libyaml 0.1.5 for 2.x rubies also · 45067e75
      This should plug the vulnerability to CVE-2013-6393 (and fix #504)
      that can still occur in certain systems: If the ruby build process
      couldn't find a libyaml that worked, it would build its own vendored
      libyaml, which was 0.1.4 (and is vulnerable).
      
      Instead, specify that the build always should install the latest
      libyaml & build against that.
      Andreas Fuchs committed