RubyGems: Multiple vulnerabilities

RubyGems: Multiple vulnerabilities Multiple vulnerabilities were found in RubyGems, the worst of which allows execution of arbitrary code. rubygems 2017-10-08 2017-10-08 629230 remote 2.6.13 2.6.13

RubyGems is a sophisticated package manager for Ruby.

Multiple vulnerabilities have been discovered in RubyGems. Please review the referenced CVE identifiers for details.

A remote attacker, by enticing a user to install a specially crafted gem, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

There is no known workaround at this time.

All RubyGems users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-ruby/rubygems-2.6.13"

CVE-2017-0899 CVE-2017-0900 CVE-2017-0901 CVE-2017-0902 chrisadr chrisadr