Fedora alert FEDORA-2015-12574 (rubygems)
From: | updates@fedoraproject.org | |
To: | package-announce@lists.fedoraproject.org | |
Subject: | [SECURITY] Fedora 22 Update: rubygems-2.4.8-100.fc22 | |
Date: | Tue, 11 Aug 2015 02:06:59 +0000 | |
Message-ID: | <20150811020702.0FC496087B07@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-12574 2015-08-01 00:12:18 -------------------------------------------------------------------------------- Name : rubygems Product : Fedora 22 Version : 2.4.8 Release : 100.fc22 URL : https://rubygems.org/ Summary : The Ruby standard for packaging ruby libraries Description : RubyGems is the Ruby standard for publishing and managing third party libraries. -------------------------------------------------------------------------------- Update Information: Update to RubyGems 2.4.8. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 10 2015 Vít Ondruch <vondruch@redhat.com> - 2.4.8-100 - Update to RubyGems 2.4.8. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1236116 - CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint() https://bugzilla.redhat.com/show_bug.cgi?id=1236116 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update rubygems' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...