CVE:CVE-2013-0334
CNNVD:CNNVD-201410-1267
Bundler是一套基于C和C++开发的称为structure-from-motion（SfM）的系统，它能够利用无序的图片集合（例如来自网络的图片）重建出3D的模型。 
Bundler 1.7之前版本中存在安全漏洞。当程序使用多个top-level源代码行时，远程攻击者可通过创建具有相同名称的gem利用该漏洞安装任意gem。
solution:Upgrade bundler bundler to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade fedoraproject fedora to a higher version than 19,20,21,and avoid the version 19,20,21