development/libraries

Jump to letter: [ 3ABCDEFGHIJKLMNOPQRSTUVWXYZ ]

rubygem-json - This is a JSON implementation as a Ruby extension in C

Website: http://ruby-lang.org/
License: Ruby or GPLv2
Vendor: Scientific Linux
Description:
This is a implementation of the JSON specification according to RFC 4627.
You can think of it as a low fat alternative to XML, if you want to store
data to disk or transmit it over a network rather than use a verbose
markup language.

Packages

rubygem-json-1.7.7-36.el7.x86_64 [79 KiB] Changelog by Vít Ondruch (2019-04-04): 
- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
rubygem-json-1.7.7-35.el7_6.x86_64 [79 KiB] Changelog by Vít Ondruch (2019-04-04): 
- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283
rubygem-json-1.7.7-34.el7_6.x86_64 [77 KiB] Changelog by Jun Aruga (2018-11-01): 
- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395
rubygem-json-1.7.7-33.el7_4.x86_64 [78 KiB] Changelog by Vít Ondruch (2018-02-19): 
- Fix always passing WEBrick test.
rubygem-json-1.7.7-22.el7_0.x86_64 [73 KiB] Changelog by Vít Ondruch (2014-11-16): 
- Fix REXML billion laughs attack via parameter entity expansion
  (CVE-2014-8080).
  Resolves: rhbz#1163998
- REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
  Resolves: rhbz#1163998

Listing created by Repoview-0.6.6-4.el7