SLES 15 — ruby2.5-rubygem-bundler — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 28 December 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:1294-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36327 CVE-2021-43809 CVE-2019-3881 Upstream summary: Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, […]