Vulnerability Bulletins |
DSA-3247 ruby2.1 - security update |
|
| Affected software | Debian |
|
It was discovered that the Ruby OpenSSL extension, part of the interpreterfor the Ruby language, did not properly implement hostname matching, inviolation of RFC 6125. This could allow remote attackers to perform aman-in-the-middle attack via crafted SSL certificates. More info: https://www.debian.org/security/2015/dsa-3247 |
|