RubyGems HTTPS to HTTP redirect

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-2125 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• rubygems/rubygems · PACKAGE
• rubygems/rubygems · WEB
• rubysec/ruby-advisory-db · WEB
• rhn.redhat.com/errata/RHSA-2013-1203.html · WEB
• rhn.redhat.com/errata/RHSA-2013-1441.html · WEB
• rhn.redhat.com/errata/RHSA-2013-1852.html · WEB
• openwall.com/lists/oss-security/2012/04/20/24 · WEB
• ubuntu.com/usn/USN-1582-1 · WEB
• secunia.com/advisories/55381
• ubuntu.com/usn/USN-1582-1 · Vendor Advisory

More vulnerabilities in rubygems-update

• CVE-2019-8323HIGH 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout…
• CVE-2019-8322HIGH 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to …
• CVE-2019-8321HIGH 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose calls say without escaping, escape seque…
• CVE-2019-8325HIGH 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape se…
• CVE-2019-8324HIGH 8.8An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, a…