Lucene search

K
suseSuseSUSE-SU-2013:0609-1
HistoryApr 03, 2013 - 8:08 p.m.

Security update for rubygem-json_pure (important)

2013-04-0320:08:23
lists.opensuse.org
14

0.026 Low

EPSS

Percentile

89.2%

The json_pure Ruby Gem has been updated to fix a Denial of
Service and Unsafe Object Creation vulnerability in JSON
(CVE-2013-0269)

Additional fixes:

  • Entity expansion DoS vulnerability in REXML (XML bomb)