Ubuntu Security Update USN-8190-1: Rack::Session vulnerability

[LinuxBot]

SeungMyung Lee discovered that Rack::Session did not properly reject cookies upon decryption failure. A remote attacker could use this issue to manipulate session contents and possibly gain unauthorized access.

Continue reading...