tocsin

Debian/jruby: unknown

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via

Action: Upgrade jruby to 1.5.6-5 or later.

Affected

introducedfixedlast affected
01.5.6-5-

Fixed versions

1.5.6-5

Sources

published · modified · JSON