Lucene search
Redhat.comRH:CVE-2018-1000076HistoryFeb 25, 2020 - 1:31 p.m.
CVE-2018-1000076
2020-02-2513:31:46
redhat.com
access.redhat.com
11
0.014 Low
EPSS
Percentile
86.6%
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures… This vulnerability appears to have been fixed in 2.7.6.
Related
prion
prion
Input validation
2018-03-13 15:29:00
osv
osv
RubyGems Improper Verification of Cryptographic Signature vulnerability
2022-05-14 01:01:12
CVE-2018-1000076
2018-03-13 15:29:00
jruby - security update
2018-03-31 00:00:00
veracode
veracode
Improper Signature Validation
2019-05-16 03:22:56
github
github
RubyGems Improper Verification of Cryptographic Signature vulnerability
2022-05-14 01:01:12
cve
cve
CVE-2018-1000076
2018-03-13 15:29:00
ubuntucve
ubuntucve
CVE-2018-1000076
2018-03-13 00:00:00
cvelist
cvelist
CVE-2018-1000076
2018-03-13 15:00:00
nvd
nvd
CVE-2018-1000076
2018-03-13 15:29:00
debiancve
debiancve
CVE-2018-1000076
2018-03-13 15:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2018-1108)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2018-1143)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-1337-1)
2018-04-02 00:00:00
nessus
nessus
EulerOS 2.0 SP1 : ruby (EulerOS-SA-2018-1143)
2018-05-29 00:00:00
EulerOS 2.0 SP2 : ruby (EulerOS-SA-2018-1108)
2018-05-02 00:00:00
Debian DLA-1337-1 : jruby security update
2018-04-03 00:00:00
debian
debian
[SECURITY] [DLA 1336-1] rubygems security update
2018-04-01 17:18:32
[SECURITY] [DLA 1337-1] jruby security update
2018-04-02 21:10:51
[SECURITY] [DSA 4219-1] jruby security update
2018-06-08 09:31:46
f5
f5
K84262603 : Multiple Ruby vulnerabilities
2022-04-22 00:00:00
K52952871 : Multiple RubyGems vulnerabilities
2022-02-16 00:00:00
mageia
mageia
Updated jruby packages fix security vulnerability
2019-02-13 14:08:25
Updated ruby-RubyGems packages fix security vulnerability
2020-06-11 00:39:20
ubuntu
ubuntu
Ruby regression
2018-04-13 00:00:00
Ruby vulnerabilities
2018-04-05 00:00:00
redhat
redhat
(RHSA-2020:0591) Moderate: ruby security update
2020-02-25 11:32:20
(RHSA-2020:0542) Moderate: ruby security update
2020-02-18 13:56:05
(RHSA-2020:0663) Moderate: ruby security update
2020-03-03 13:41:04
amazon
amazon
Medium: ruby
2018-04-05 16:06:00
Medium: ruby
2019-08-23 03:41:00
Medium: ruby20, ruby22, ruby23, ruby24
2018-04-04 23:18:00
centos
centos
ruby, rubygem, rubygems security update
2019-08-30 04:17:17
oraclelinux
oraclelinux
ruby security update
2019-08-13 00:00:00
suse
suse
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00