Lucene search

K
mageiaGentoo FoundationMGASA-2020-0186
HistoryMay 05, 2020 - 3:20 p.m.

Updated ruby-json packages fix security vulnerability

2020-05-0515:20:37
Gentoo Foundation
advisories.mageia.org
8

0.006 Low

EPSS

Percentile

79.0%

Updated ruby-json packages fix security vulnerability: In ruby-json before 2.3.0, there is an unsafe object creation vulnerability. When parsing certain JSON documents, the json gem can be coerced into creating arbitrary objects in the target system (CVE-2020-10663).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchruby-json< 2.1.0-3.1ruby-json-2.1.0-3.1.mga7