RubyGems Blog company blog

RubyGems.org gem replacement security vulnerability and mitigation

by David Radcliffe blog.rubygems.org published 2016-04-063 min read

Summary RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a co...

Points

141

HN comments

22

Submissions

1

Cited by

0 commenters

Security & PrivacyOpen Source2016

Related posts from the same era

Announcing the first SHA-1 collision

Google Security Blog20173,030 points485 commentscited by 13 details

Accidentally Stopping a Global Cyber Attack

MalwareTech20171,981 points338 commentscited by 8 details

Instagram's Million Dollar Bug

EEXFiLTRATED20151,562 points520 commentscited by 6 details

What Happens When You Send a Zero-Day to a Bank?

Privacy Log20171,494 points438 comments details

Amazon's customer service backdoor

Medium20161,447 points356 commentscited by 5 details

Keybase launches encrypted Git

Keybase Blog20171,427 points270 commentscited by 14 details