CVE-2015-1828: The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.
Please fix it.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
4.0.0).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/r/ruby-http.png){kind=link}