rubygems - security update

Fixed packages 1

Vulnerabilities 4

• Critical 9.8
  CVE-2018-1000076

  RubyGems Improper Verification of Cryptographic Signature vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerab…

  ruby2.3 jruby ruby2.0 rubygems Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• High 7.5
  CVE-2018-1000075

  RubyGems Infinite Loop vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ru…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• Medium 6.1
  CVE-2018-1000078

  RubyGems Cross-site Scripting vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server di…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018
• Medium 5.3
  CVE-2018-1000077

  RubyGems Improper Input Validation vulnerability

  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems spec…

  ruby2.3 jruby ruby2.0 ruby1.9.1 Debian Ubuntu Maven RubyGems
  Mar 13, 2018