[DRE-maint] Bug#762739: [CVE-2013-0334] Ruby dependency manager Bundler may install gems from a different source than expected

[Luciano Bello]

Package: bundler
Version: 1.1.4-6
Severity: important
Tags: security upstream patch fixed-upstream

Hi there,
    the following vulnerability was published for bundler:

CVE-2013-0334: Ruby dependency manager Bundler may install gems from a different 
source than expected

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

http://www.openwall.com/lists/oss-security/2014/09/24/9
http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html

Please adjust the affected versions in the BTS as needed.

Regards, luciano