Commit 0e597b8
committed
Update JRuby to 9.4.14.0
When verifying SSL certificates, jruby-openssl is not verifying that the
hostname presented in the certificate matches the one we are trying to
connect to, meaning a MITM could just present any valid cert for a
completely different domain they own, and JRuby wouldn't complain.
While this likely isn't relevant for the AsciiDoc generation, it is
still flagged by GitHub as potential vulnerability.1 parent 0e93c5b commit 0e597b8
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
22 | | - | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
0 commit comments