Vulnerability Bulletins

DSA-4247 ruby-rack-protection - security update

   
Affected software Debian
 
A timing attack was discovered in the function for CSRF token validationof the Ruby rack protection framework.

More info:

https://www.debian.org/security/2018/dsa-4247