-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 28 Apr 2020 02:59:30 +0530
Source: ruby-json
Binary: ruby-json
Architecture: source amd64
Version: 1.8.1-1+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
ruby-json - JSON library for Ruby
Changes:
ruby-json (1.8.1-1+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to fix unsafe object creation vulnerability.
(Fixes: CVE-2020-10663)
Checksums-Sha1:
c5623b1744955448545b281ef9d11126162013e7 2147 ruby-json_1.8.1-1+deb8u1.dsc
e06483d088d4f582c525cd2b31681bbc6df02fd6 143951 ruby-json_1.8.1.orig.tar.gz
50d9d2e8cecc10d1e7c3a653b7eefb1cefc58e0e 6564 ruby-json_1.8.1-1+deb8u1.debian.tar.xz
3ec6904c7993b0c9e0e0181ba957753f1bfd14c2 51934 ruby-json_1.8.1-1+deb8u1_amd64.deb
Checksums-Sha256:
7eb063fe0399eeaed415d533a76fe12f0c9fb43362c95e641783705e06311e74 2147 ruby-json_1.8.1-1+deb8u1.dsc
63592c114212db3dd2dbec619297034562ab45a966ebfb5162682afb8cca3652 143951 ruby-json_1.8.1.orig.tar.gz
3d813240425cbe8d82881c65fde9b3190e0d96e50cfb16175d1ce53926d8226d 6564 ruby-json_1.8.1-1+deb8u1.debian.tar.xz
90fe407469be5e0ba6e66bef7de2cf76225221950b04ec47dbc48b09d108d245 51934 ruby-json_1.8.1-1+deb8u1_amd64.deb
Files:
071cbb7ac5912dfa50fecab3dfd880d2 2147 ruby optional ruby-json_1.8.1-1+deb8u1.dsc
9e3d910ba025e0de6a31213a2a5a367b 143951 ruby optional ruby-json_1.8.1.orig.tar.gz
2bb01fb9dfa37a8e4d93215b8ddc4ce9 6564 ruby optional ruby-json_1.8.1-1+deb8u1.debian.tar.xz
a0c1c085aee63fa9f06793bc6ed52dca 51934 ruby optional ruby-json_1.8.1-1+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=pbY+
-----END PGP SIGNATURE-----
