06 Apr '16, 10pm

gem replacement security vulnerability and mitigation

RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a complete fix on April 4th, 2016. We also verified every .gem uploaded after Feb 8th, 2015, and found that none of them had been replaced. Gems whose name contains a dash (e.g. ‘blank-blank’) uploaded before that date should be verified by their authors. We’ve provided instructions on how to do that below. Details On April 2nd, 2016 the RubyGems.org security team was made aware of a vulnerability that allowed an unauthorized user to update existing gem files for existing gem versions in certain circumstances. The security team evaluated the report and confirmed the bug that lead to this possibility. We deployed a fix later on April 2nd for this issue and confirmed that the exploit was no lo...

Full article: http://blog.rubygems.org/2016/04/06/gem-replacement-vulne...

Tweets

Air Force Moving Forward With A-10 Replacement ...

defensenews.com 07 Apr '16, 4pm

Air Force Moving Forward With A-10 Replacement Option WASHINGTON — The Air Force is moving forward with a key step in deve...

Air Force moving forward with possible A-10 rep...

airforcetimes.com 07 Apr '16, 4pm

Air Force moving forward with possible A-10 replacement, general says “My requirements guys are in the process of building...

First functional version of capistrano-magento2...

rubygems.org 19 Apr '16, 4pm

RubyGems.org is the Ruby community’s gem hosting service. Instantly publish your gems and install them. Use the API to int...

Sapphire Crystal Replacement to Fit Rolex 25-29...

italy-italy.info 15 Apr '16, 7pm

Details and Price for this Product (eBay Sponsored Link)

Condominium For Sale - Gem Residences Toa Payoh...

propertyguru.com.sg 06 Apr '16, 11am

Location: Lor 4/6 Toa Payoh District: 12 Tenure of Land: 99 years Leasehold wet fr 21 Sept 2105 Site Area: 12.154.6sqm/ 13...

BREAKING: Three replacement players called up for #Singapore7s READ:

BREAKING: Three replacement players called up f...

allblacks.com 12 Apr '16, 4am

Three replacement players for Singapore Sevens allblacks.com 12 Apr 2016 Getty Images Three players have been called into ...