CVE-2012-2126 (rubygems-update): CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23

April 20th, 2012

SEVERITY

CVSS v2.0: 4.3 (Medium)

PATCHED VERSIONS

>= 1.8.23

DESCRIPTION

RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.

RubySec

CVE-2012-2126 (rubygems-update): CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23

ADVISORIES

GEM

LIBRARY

SEVERITY

PATCHED VERSIONS

DESCRIPTION

Recent Advisories