{"id":"SUSE-RU-2017:3408-1","summary":"Recommended update for rubygem-yajl-ruby","details":"\nThis update for rubygem-yajl-ruby provides the following fixes:\n\n- Update to version 1.3.1\n- Fix crafted JSON file allows to crash ruby process with a SIGABRT (bsc#1066565, CVE-2017-1651)\n","modified":"2026-02-04T02:55:05.381493Z","published":"2017-12-21T16:48:13Z","related":["CVE-2017-1651"],"upstream":["CVE-2017-1651"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement//suse-ru-20173408-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1066565"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-1651"}],"affected":[{"package":{"name":"rubygem-yajl-ruby","ecosystem":"SUSE:OpenStack Cloud 6","purl":"pkg:rpm/suse/rubygem-yajl-ruby&distro=SUSE%20OpenStack%20Cloud%206"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.3.2"}]}],"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-yajl-ruby":"1.3.1-4.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2017:3408-1.json"}},{"package":{"name":"rubygem-yajl-ruby","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/rubygem-yajl-ruby&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.3.2"}]}],"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-yajl-ruby":"1.3.1-4.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2017:3408-1.json"}},{"package":{"name":"rubygem-yajl-ruby","ecosystem":"SUSE:Enterprise Storage 3","purl":"pkg:rpm/suse/rubygem-yajl-ruby&distro=SUSE%20Enterprise%20Storage%203"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.3.2"}]}],"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-yajl-ruby":"1.3.1-4.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2017:3408-1.json"}},{"package":{"name":"rubygem-yajl-ruby","ecosystem":"SUSE:Enterprise Storage 4","purl":"pkg:rpm/suse/rubygem-yajl-ruby&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.3.2"}]}],"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-yajl-ruby":"1.3.1-4.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2017:3408-1.json"}}],"schema_version":"1.7.3"}