Red Hat Security AdvisoryRHSA-2007:0965
ruby security update
Released 2007-11-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-5.el5_1.1, ruby-1.8.5-5.el5_1.1.i386, ruby-1.8.5-5.el5_1.1.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) ruby-1.8.5-5.el5_1.1, ruby-1.8.5-5.el5_1.1.i386, ruby-docs-1.8.5-5.el5_1.1 +11
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ruby-1.8.5-5.el5_1.1, ruby-devel-1.8.5-5.el5_1.1, ruby-devel-1.8.5-5.el5_1.1.i386 +2
Fixes 2 records
Priority LOW 27
The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a re…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0187 · Published 2007-11-14 · Fixed CWE-287
Priority LOW 23
The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS r…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01681 · Published 2007-10-01 · Fixed CWE-287
