Multiple vulnerabilities in RubyGems

&gt;&gt; &quot;a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files&quot;<p>Yeeks. Not good.<p>(sudo) gem update --system ASAP

I have a mirror of all Rubygems from last month. Should I scan em for PoCs?

Is the work on adding TUF to RubyGems still happening? I can only find this stagnant PR: <a href="https:&#x2F;&#x2F;github.com&#x2F;rubygems&#x2F;rubygems&#x2F;pull&#x2F;719" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rubygems&#x2F;rubygems&#x2F;pull&#x2F;719</a>

Is there a more detailed description of the vulnerabilities somewhere?

I&#x27;m sure this has been brought up before, but I think HN should have a special tab where submissions like this get pinned--Important stores where people need to take action on stuff concerning security holes or political events (e.g. Net neutrality).

Ruby, the gift that keeps on giving.