| |||||||||||||||||||
Fedora alert FEDORA-2013-3050 (rubygem-json)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-3050 2013-02-26 01:55:06 -------------------------------------------------------------------------------- Name : rubygem-json Product : Fedora 17 Version : 1.6.8 Release : 1.fc17 URL : http://json.rubyforge.org Summary : A JSON implementation in Ruby Description : This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language. -------------------------------------------------------------------------------- Update Information: A security flaw was discovered on the previous json that there is a denial of service and unsafe object creation vulnerability. This vulnerability has been assigned the CVE identifier CVE-2013-0269. This new rpm will fix this issue. -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 25 2013 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.6.8-1 - Update to 1.6.8 - Security fix for JSON create_additions default value (CVS-2013-0269) * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #910313 - CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=910313 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-json' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||