Lucene search

K
rubygemsRubySecRUBY:RUBYGEMS-UPDATE-2012-2125-85809
HistorySep 24, 2012 - 8:00 p.m.

CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23

2012-09-2420:00:00
RubySec
rubysec.com
5

RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which
makes it easier for remote attackers to observe or modify a gem during
installation via a man-in-the-middle attack.

CPENameOperatorVersion
rubygems-updatelt1.8.23