Mandriva- Advisories MDVSA-2008:029: Updated ruby packages fix possible man-in-the-middle attack

[Mandriva]

Advisories MDVSA-2008:029: Updated ruby packages fix possible man-in-the-middle attack
Ruby network libraries Net::HTTP, Net::IMAP, Net::FTPTLS, Net::Telnet,
Net::POP3, and Net::SMTP, up to Ruby version 1.8.6 are affected by a
possible man-in-the-middle attack, when using SSL, due to a missing
check of the CN (common name) attribute in SSL certificates against
the server's hostname.

The updated packages have been patched to prevent the issue.
http://mandrivausers.org/index.php?showtopic=48274
http://mandrivausers.org/index.php?showtopic=48274
Thu, 31 Jan 2008 08:38:16 +0000