Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
cb9cfa6a by Moritz Muehlenhoff at 2026-09-26T23:48:56+02:00
add ruby-oj commit references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -99092,27 +99092,35 @@ CVE-2026-55223 (c3p0 is a JDBC Connection pooling 
library. In versions prior to
 CVE-2026-54903 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-475m-ph3x-64gp
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54902 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.6-2
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-m578-w5vf-rfcm
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54901 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54900 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54899 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-2cw7-v8ff-p88r
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54898 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54897 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-9ppp-w3g4-fh4q
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54896 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-35w3-pjm6-wj95
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54696 (Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 
through 2. ...)
        - ruby-json 2.19.9+dfsg-1
        [trixie] - ruby-json <no-dsa> (Minor issue)
@@ -99127,12 +99135,15 @@ CVE-2026-54672 (electron-updater allows for automatic 
updates for Electron apps.
 CVE-2026-54592 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9
+       NOTE: 
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f 
(v3.17.3)
 CVE-2026-54502 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
+       NOTE: 
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 
(v3.17.3)
 CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller 
packaged as ...)
        - ruby-oj 3.17.3-1
        NOTE: 
https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
+       NOTE: 
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f 
(v3.17.3)
 CVE-2026-52868 (An unauthenticated attacker can read worklist records from a 
directory ...)
        - dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
        [trixie] - dcmtk 3.6.9-5+deb13u3



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb9cfa6acae705b438812cd98faa62b8506bf3b6

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb9cfa6acae705b438812cd98faa62b8506bf3b6
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to