Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-c3y8-w4b4-3qea
Aliases:
CVE-2018-16395
GHSA-mmrq-6999-72v8
|
Improper Certificate Validation
When two `OpenSSL::X509::Name` objects are compared using `==`, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of `==` will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|