Index: NEWS =================================================================== --- NEWS (revision 42928) +++ NEWS (working copy) @@ -461,6 +461,10 @@ with all sufficient information, see the XML declaration is used for XML document encoding. * RubyGems + * Updated to 2.0.8. This fixes CVE-2013-4287: + + http://rubygems.rubyforge.org/rubygems-update/CVE-2013-4287_txt.html + * Updated to 2.0.3. See http://rubygems.rubyforge.org/rubygems-update/History_txt.html#label-2.0.3+%2F+2012-03-1 for release notes. Index: lib/rubygems/version.rb =================================================================== --- lib/rubygems/version.rb (revision 42928) +++ lib/rubygems/version.rb (working copy) @@ -147,7 +147,7 @@ class Gem::Version # FIX: These are only used once, in .correct?. Do they deserve to be # constants? - VERSION_PATTERN = '[0-9]+(\.[0-9a-zA-Z]+)*' # :nodoc: + VERSION_PATTERN = '[0-9]+(?>\.[0-9a-zA-Z]+)*' # :nodoc: ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})*\s*\z/ # :nodoc: ## Index: lib/rubygems.rb =================================================================== --- lib/rubygems.rb (revision 42928) +++ lib/rubygems.rb (working copy) @@ -8,7 +8,7 @@ require 'rbconfig' module Gem - VERSION = '2.0.7' + VERSION = '2.0.8' end # Must be first since it unloads the prelude from 1.9.2 @@ -307,7 +307,7 @@ module Gem @paths = nil @user_home = nil Gem::Specification.reset - Gem::Security.reset if const_defined? :Security + Gem::Security.reset if defined?(Gem::Security) end ##