FEDORA-2017-81cf93b7c2 — security update for rubygems

stable

rubygems-2.6.13-100.fc27

FEDORA-2017-81cf93b7c2 created by vondruch 7 years ago for Fedora 27

Update to RubyGems 2.6.13.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-81cf93b7c2

This update has been submitted for testing by vondruch.

7 years ago

This update has been pushed to testing.

7 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for stable by vondruch.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

rubygems-2.6.13-100.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1487587 CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name

BZ#1487588 CVE-2017-0900 rubygems: No size limit in summary length of gem spec

BZ#1487589 CVE-2017-0902 rubygems: DNS hijacking vulnerability

BZ#1487590 CVE-2017-0899 rubygems: Escape sequence in the "summary" field of gemspec

BZ#1487591 CVE-2017-0899 CVE-2017-0900 CVE-2017-0901 CVE-2017-0902 rubygems: various flaws [fedora-all]

rubygems-2.6.13-100.fc27

Automated Test Results

None