Risks
Advisories
Browse
or
or
SUSE Security Update - rubygem-json_pure (SUSE-SU-2013:0609-1)
SUSE Security Update: Security update for rubygem-json_pure
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:0609-1
Rating:             important
References:         #803342
Cross-References:   CVE-2013-0269
Affected Products:
                    WebYaST 1.2
                    SUSE Studio Standard Edition 1.2
                    SUSE Studio Extension for System z 1.2
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   The json_pure Ruby Gem has been updated to fix a Denial of
   Service and  Unsafe Object Creation vulnerability in JSON
   (CVE-2013-0269)

   Additional fixes:

   * Entity expansion DoS vulnerability in REXML (XML bomb)

   Security Issue reference:

   * CVE-2013-0269
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0269
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - WebYaST 1.2:

      zypper in -t patch slewyst12-rubygem-json_pure-7486

   - SUSE Studio Standard Edition 1.2:

      zypper in -t patch sleslms12-rubygem-json_pure-7486

   - SUSE Studio Extension for System z 1.2:

      zypper in -t patch slestso12-rubygem-json_pure-7486

   To bring your system up-to-date, use "zypper patch".


Package List:

   - WebYaST 1.2 (i586 ia64 ppc64 s390x x86_64):

      rubygem-json_pure-1.2.0-0.4.1

   - SUSE Studio Standard Edition 1.2 (x86_64):

      rubygem-json_pure-1.2.0-0.4.1

   - SUSE Studio Extension for System z 1.2 (s390x):

      rubygem-json_pure-1.2.0-0.4.1


References:

   http://support.novell.com/security/cve/CVE-2013-0269.html
   https://bugzilla.novell.com/803342
   http://download.novell.com/patch/finder/?keywords=231bb11d5d47466d339ecd1ec5122771




Spotlight

Chrome extension thwarts user profiling based on typing behavior

Infosec consultant Paul Moore came up with a working solution to thwart a type of behavioral profiling. The result is a Chrome extension called Keyboard Privacy, which prevents profiling of users by the way they type by randomizing the rate at which characters reach the DOM.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Wed, Jul 29th
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //