Skip to content

Fix RDoc version and add a caution message #2127

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Aug 28, 2019
Merged

Fix RDoc version and add a caution message #2127

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a7a814c
Fix RDoc version and add a caution message
aycabta Aug 28, 2019
b447fb3
Use "Update" instead of "CAUTION"
aycabta Aug 28, 2019
71eb789
Add a history
aycabta Aug 28, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 2 additions & 19 deletions en/news/_posts/2019-08-28-multiple-jquery-vulnerabilities-in-rdoc.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,25 +40,7 @@ RDoc 6.1.2 or later includes the fix for the vulnerabilities, so upgrade RDoc to
gem install rdoc -f
```

At this time, the following message will be displayed. Every time you get `Overwrite the executable? [YN]`, enter `y` and confirm with Enter to continue the update.

```
Updating installed gems
Updating rdoc
Fetching: rdoc-6.1.1.gem (100%)
rdoc's executable "rdoc" conflicts with /home/aycabta/.rbenv/versions/2.5.3/bin/rdoc
Overwrite the executable? [yN] y
rdoc's executable "ri" conflicts with /home/aycabta/.rbenv/versions/2.5.3/bin/ri
Overwrite the executable? [yN] y
Successfully installed rdoc-6.1.1
Parsing documentation for rdoc-6.1.1
Installing ri documentation for rdoc-6.1.1
Installing darkfish documentation for rdoc-6.1.1
Done installing documentation for rdoc after 6 seconds
Parsing documentation for rdoc-6.1.1
Done installing documentation for rdoc after 3 seconds
Gems updated: rdoc
```
*Update:* The initial version of this post said rdoc-6.1.1.gem which was still vulnerable. Please make sure that you install rdoc-6.1.2 or later.

Regarding the development version (master branch), update to HEAD.

Expand All @@ -73,3 +55,4 @@ Thanks to [Chris Seaton](https://hackerone.com/chrisseaton) for reporting the is
## History

* Originally published at 2019-08-28 09:00:00 UTC
* RDoc version fixed at 2019-08-28 11:50:00 UTC
21 changes: 2 additions & 19 deletions ja/news/_posts/2019-08-28-multiple-jquery-vulnerabilities-in-rdoc.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,25 +40,7 @@ Ruby の標準添付ライブラリである RDoc に、jQuery に関するク
gem install rdoc -f
```

その際に以下のようなメッセージが出るので、 `Overwrite the executable? [yN]` と出る度に随時 `y` を入力し Enter で確定することで更新を続行してください。

```
Updating installed gems
Updating rdoc
Fetching: rdoc-6.1.1.gem (100%)
rdoc's executable "rdoc" conflicts with /home/aycabta/.rbenv/versions/2.5.3/bin/rdoc
Overwrite the executable? [yN] y
rdoc's executable "ri" conflicts with /home/aycabta/.rbenv/versions/2.5.3/bin/ri
Overwrite the executable? [yN] y
Successfully installed rdoc-6.1.1
Parsing documentation for rdoc-6.1.1
Installing ri documentation for rdoc-6.1.1
Installing darkfish documentation for rdoc-6.1.1
Done installing documentation for rdoc after 6 seconds
Parsing documentation for rdoc-6.1.1
Done installing documentation for rdoc after 3 seconds
Gems updated: rdoc
```
注意: 当初この記事で rdoc-6.1.1.gem と書いていましたが、これは脆弱なバージョンでした。rdoc-6.1.2 以降を使用してください。

開発版については、HEAD に更新してください。

Expand All @@ -73,3 +55,4 @@ Gems updated: rdoc
## 更新履歴

* 2019-08-28 09:00:00 (JST) 初版
* 2019-08-28 20:50:00 (JST) RDoc のバージョン修正