MGASA-2019-0123

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0123.html

Import Source

https://advisories.mageia.org/MGASA-2019-0123.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2019-0123

Related

Published

2019-04-05T18:12:59Z

Modified

2019-04-05T17:34:53Z

Summary

Updated ruby-ox packages fix security vulnerability

Details

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj (CVE-2017-15928).

Also, the package was broken and has been fixed to function properly.

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.2-1.mga6

{
    "section": "core"
}