Rails: Psych，从0.1.4更新libyaml

Question

我需要安装capybara-webkit，它需要qt库，所以我使用了以下命令使用自制安装了它们

brew update
brew install qt
brew linkapps

然后，我捆绑，一切都好的水豚-webkit。然而，我的警卫正在发出以下警告。

 You appear to have an outdated version of libyaml (0.1.4) installed on your system.

  Prior to 0.1.6, libyaml is vulnerable to a heap overflow exploit from malicious YAML payloads.


  The easiest thing to do right now is probably to update Psych to the latest version and enable
  the 'bundled-libyaml' option, which will install a vendored libyaml with the vulnerability patched:

  gem install psych -- --enable-bundled-libyaml

看起来很简单。然而，即使在成功安装了“捆绑- libyaml”选项之后，我仍然看到这个关于过时libyaml的警告。此外，当我检查与心灵相关的libyaml版本(ruby -rpsych -e 'p Psych.libyaml_version')时，它仍然是1.4。

有什么想法吗？

Answer 1

试着：

brew upgrade libyaml

为我工作。

Answer 2

brew update libyaml

不是为我工作，但是

rvm get stable

做。

Answer 3

在Ubuntu上，这对我起了作用。它恢复所有的红宝石，所以可能需要一段时间。

rvm pkg install libyaml
rvm reinstall all --force

样本运行

rvm pkg install libyaml

Beware, 'rvm pkg ...' is deprecated, read about the new autolibs feature: 'rvm help   autolibs'.

Checking requirements for ubuntu.
Requirements installation successful.
Fetching yaml-0.1.6.tar.gz to /home/assay/.rvm/archives
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                             Dload  Upload   Total   Spent    Left  Speed
100  491k  100  491k    0     0   142k      0  0:00:03  0:00:03 --:--:--  481k
No checksum for downloaded archive, recording checksum in user configuration.
Extracting yaml to /home/assay/.rvm/src/yaml-0.1.6...
Prepare yaml in /home/assay/.rvm/src/yaml-0.1.6..
Configuring yaml in /home/assay/.rvm/src/yaml-0.1.6..........
Compiling yaml in /home/assay/.rvm/src/yaml-0.1.6...................
Installing yaml to /home/assay/.rvm/usr.......

Please note that it's required to reinstall all rubies:

    rvm reinstall all --force