ruby4.0-rubygem-json_pure-2.7.6-1.5 on GA media
ruby4.0-rubygem-json_pure-2.7.6-1.5 on GA media
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10663US | high7.5 | Exploit | ||
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar… | ||||
references
External citations — patches, advisories, analysis.
- URL of this CSAF noticeself
- SUSE CVE CVE-2020-10663 pageself
- SUSE ratingsexternal
remediations (4)
- Fixedruby4.0-rubygem-json_pure-0:2.7.6-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-json_pure-0:2.7.6-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-json_pure-0:2.7.6-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-json_pure-0:2.7.6-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan