CVE-2017-0901

RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

Date published : 2017-08-31

http://www.securityfocus.com/bid/100580

https://www.debian.org/security/2017/dsa-3966