[Secure-testing-team] Bug#842432: ruby2.3: CVE-2016-7798: IV Reuse in GCM Mode

[Salvatore Bonaccorso]

Source: ruby2.3
Version: 2.3.1-5
Severity: important
Tags: security upstream patch
Forwarded: https://github.com/ruby/openssl/issues/49

Hi,

the following vulnerability was published for ruby2.3.

CVE-2016-7798[0]:
IV Reuse in GCM Mode

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-7798
[1] https://github.com/ruby/openssl/issues/49
[2] https://github.com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062

Regards,
Salvatore