net-http vulnerability in Ruby
Posted by: snakepimp
Posted on: 2007-12-18 16:57:00
Is the Ruby install @ Dreamhost affected by this?
The DH Wiki says DH is running 1.8.5 which is listed as affected up to 1.8.5 p113
http://www.ruby-lang.org/en/news/2007/10/04/net-https-vulnerability/
http://www.isecpartners.com/advisories/2007-006-rubyssl.txt
Before I start working on Ruby on the server I need to know this. I see in the wiki it says we can install 1.8.6 but no specific build vers.
Anybody know for sure what the status of this vulnerability is @ DH?
It's ironic that the first project I really need an SSL cert for happens to be a Ruby project.
~Once Greenland melts, it'll be a different ballgame,
Jeremy.