Medium SUSE-RU-2017:3408-1 1 CVE

Recommended update for rubygem-yajl-ruby

Published Dec 21, 2017 · Updated Feb 4, 2026

Ecosystem: SUSE

Summary

This update for rubygem-yajl-ruby provides the following fixes:

- Update to version 1.3.1
- Fix crafted JSON file allows to crash ruby process with a SIGABRT (bsc#1066565, CVE-2017-1651)

Fixed packages 4

Release	Package	Fixed in
SUSE · Enterprise Storage 3	rubygem-yajl-ruby	1.3.1-4.3.2
SUSE · Enterprise Storage 4	rubygem-yajl-ruby	1.3.1-4.3.2
SUSE · OpenStack Cloud 6	rubygem-yajl-ruby	1.3.1-4.3.2
SUSE · OpenStack Cloud 7	rubygem-yajl-ruby	1.3.1-4.3.2

Vulnerabilities 1

Medium 5.4

CVE-2017-1651

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager

Jul 3, 2018

References

report
https://bugzilla.suse.com/1066565
web
https://www.suse.com/security/cve/CVE-2017-1651