maintainer-feedback requested: [Bug 194491] www/rubygem-httpclient: Bump to version 2.5.1
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Mon Oct 20 17:26:55 UTC 2014
robmessick at gmail.com has asked ruby at FreeBSD.org for maintainer-feedback:
Bug 194491: www/rubygem-httpclient: Bump to version 2.5.1
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194491
--- Description ---
There are some changes to defaults in httpclient 2.5.0+ to mitigate
susceptibility to some recent(ish) SSL atack vectors.
See: https://github.com/nahi/httpclient/blob/master/CHANGELOG.md
Relevant changes in 2.5.0:
"""
Disabled SSLv3 in favor of POODLE Attack prevention.
Enabled 1/n-1 fragment in favor of BEAST Attack prevention.
No TLS compression in favor of CRIME Attack prevention.
"""
--- Comment #1 from Bugzilla Automation <bugzilla at FreeBSD.org> ---
Auto-assigned to maintainer ruby at FreeBSD.org
More information about the freebsd-ruby
mailing list