Merge pull request #83 from opsysdebug/patch-1

Fix Use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value

Author: hsbt

lib/rubygems/mirror.rb

@@ -45,7 +45,7 @@ def update_specs
       path = to(sf)
 
       @fetcher.fetch(from(sfz), specz)
-      open(path, 'wb') { |f| f << Gem::Util.gunzip(File.binread(specz)) }
+      File.open(path, 'wb') { |f| f << Gem::Util.gunzip(File.binread(specz)) }
     end
   end