From: Eric Hodel <drbrain@...7.net>
Date: 2008-04-11T07:02:44+09:00
Subject: Re: Revert back to rubygems 0.9 from 1.0.1

On Apr 9, 2008, at 08:25 AM, dkmd_nielsen wrote:
>
> I will update all my servers to rubygems 0.9.4.  I wasn't sure which
> version is the correct one.  All my servers are using 0.9.0; and they
> are all fine.

0.9.0 and earlier have an installation exploit that allow gems to  
install files into arbitrary locations on the filesystem.  Use at  
least 0.9.1.