Updated ruby-json packages fix security vulnerability

🗓️ 05 May 2020 12:20:37Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 29 Views

Updated ruby-json packages fix security vulnerabilit

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to multiple Vulnerabilities due to Ruby package	20 Jun 202506:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Mailbox vulnerable to security bypass due to Apache Zookeeper (CVE-2020-10663)	4 Jan 202306:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	23 Jun 202516:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Cloud Foundry Migration Runtime	13 Oct 202114:44	–	ibm
FreeBSD	rubygem-json -- Unsafe Objection Creation Vulnerability in JSON (Additional fix)	19 Mar 202000:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2021-1641)	24 May 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-007)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ruby20 (ALAS-2020-1416)	13 Aug 202000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	any	ruby-json	2.1.0-3.1	ruby-json-2.1.0-3.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
ruby-lang	www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/
debian	www.debian.org/lts/security/2020/dla-2190

05 May 2020 12:20Current

3.4Low risk

Vulners AI Score3.4

CVSS 25

CVSS 3.17.5

EPSS0.05892

ruby-json packages security vulnerability unsafe object creation json documents gem arbitrary objects target system cve-2020-10663 unix