[Secure-testing-team] Bug#798466: ruby-devise-two-factor: TOTP Replay Attack (no CVE yet)

[Moritz Muehlenhoff]

Package: ruby-devise-two-factor
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see http://www.openwall.com/lists/oss-security/2015/09/06/2
for details.

Cheers,
        Moritz