Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian LTS: DLA-1956-1 Moderate: ruby-openid Discovery Manipulation

debian lts
Calendar Grey October 11, 2019
Dist Debian Esm H88
Enhance ruby-openid to resolve discovery inconsistencies and safeguard against data exposure on Debian platforms.
ruby-openid performed discovery first, and then verification

Summary

For Debian 8 "Jessie", this problem has been fixed in version
2.5.0debian-1+deb8u1.

We recommend that you upgrade your ruby-openid packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: ruby-openid
Version: 2.5.0debian-1+deb8u1
CVE ID: CVE-2019-11027

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here