Lucene search

K
mageiaGentoo FoundationMGASA-2022-0340
HistorySep 21, 2022 - 9:15 p.m.

Updated google-gson packages fix security vulnerability

2022-09-2121:15:27
Gentoo Foundation
advisories.mageia.org
30

0.002 Low

EPSS

Percentile

64.6%

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. (CVE-2022-25647)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchgoogle-gson< 2.8.6-1.1google-gson-2.8.6-1.1.mga8