Heroku Potential Ruby and YAML Command Line Validation Security Vulnerability

Question

I received a message about Heroku vulnerability:

https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525/?mkt_tok=3RkMMJWWfF9wsRonuKjAZKXonjHpfsX%2B6u8vXO% % 2F0ER3fOvrPUfGjI4ASsNjI% 2BSLDwEYGJlv6SgFQrjAMapmyLgLUhE% 3D

The email says:

Check if you have touched

Run the following in your application:

 $ heroku run "ruby -rpsych -e \"p Psych.libyaml_version.join(‘.’)\"" -a <app name>

If you see the following error message, then you are not vulnerable and can ignore the rest of this message:

  <internal:lib/rubygems/custom_require>:29:in `require': no such file to load -- psych (LoadError)
  from <internal:lib/rubygems/custom_require>:29:in `require'

Unfortunately, when I launched it, an error occurred (using Mac):

 -bash: syntax error near unexpected token `('

How to run the command line correctly? Thank.

Answer 1

$ heroku run "ruby -rpsych -e \"p Psych.libyaml_version.join(‘.’)\"" -a <app name>

: " ’

: " '