diff options
| author | drbrain <drbrain@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2013-09-25 00:53:19 +0000 |
|---|---|---|
| committer | drbrain <drbrain@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2013-09-25 00:53:19 +0000 |
| commit | 8eb39185810a59ad8d3aa874ba8f6c9a7b0949ac (patch) | |
| tree | 790b26abda56b06c1d25a7a0036d882c32df7609 /lib/rubygems/remote_fetcher.rb | |
| parent | 61f3a787f6f12c794299871d5739cfdfa01ec617 (diff) | |
* lib/rubygems: Fix CVE-2013-4363. Miscellaneous minor improvements.
* test/rubygems: Tests for the above.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@43039 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'lib/rubygems/remote_fetcher.rb')
| -rw-r--r-- | lib/rubygems/remote_fetcher.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/rubygems/remote_fetcher.rb b/lib/rubygems/remote_fetcher.rb index 6abd6bd9db..bab96cba1a 100644 --- a/lib/rubygems/remote_fetcher.rb +++ b/lib/rubygems/remote_fetcher.rb @@ -107,7 +107,7 @@ class Gem::RemoteFetcher return if found.empty? - spec, source = found.sort_by { |(s,_)| s.version }.last + spec, source = found.max_by { |(s,_)| s.version } download spec, source.uri.to_s end |