tocsin

Debian/ruby-oj: unknown

Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, disabling symbol_keys on a reused Oj::Parser instance triggers a heap use-after-free. When s

Action: Upgrade ruby-oj to 3.14.2-1+deb12u1 or later.

Affected

introducedfixedlast affected
03.14.2-1+deb12u1-

Fixed versions

3.14.2-1+deb12u1

Sources

published · modified · JSON