1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2020-d171bf636d

[FEDORA-2020-d171bf636d] Fedora 30: rubygem-json

Severity High
Affected Packages 1
CVEs 1
Info Packages References Vulnerabilities

A security flaw was found on rubygem-json prior to 2.3.0 which was now assigned
as CVE-2020-10663. This new rpm contains backport fixes for this issue.

Package Affected Version
pkg:rpm/fedora/rubygem-json?distro=fedora-30 < 2.2.0.202.fc30
ID
FEDORA-2020-d171bf636d
Severity
high
Severity from
CVE-2020-10663
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d171bf636d
Published
2020-05-03T04:41:34
(4 years ago)
Modified
2020-05-03T04:41:34
(4 years ago)
Rights
Copyright 2020 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 1827501 Bug #1827501 - CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1827501
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/rubygem-json?distro=fedora-30 fedora rubygem-json < 2.2.0.202.fc30 fedora-30
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date