Lucene search

K
rubygemsRubySecRUBY:RUBYGEMS-UPDATE-2012-2126-81444
HistoryApr 19, 2012 - 8:00 p.m.

CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23

2012-04-1920:00:00
RubySec
rubysec.com
7

RubyGems before 1.8.23 does not verify an SSL certificate, which allows
remote attackers to modify a gem during installation via a man-in-the-middle attack.

CPENameOperatorVersion
rubygems-updatelt1.8.23