openSUSE-SU-2025:0004-1

Details

This update for rubygem-json-jwt fixes the following issues:

New upstream release 1.16.6, see bundled CHANGELOG.md
Remove padding oracle by @btoews in https://github.com/nov/json-jwt/pull/109
Fixes CVE-2023-51774 boo#1220727
updated to version 1.11.0
- no changelog found
- Fixes CVE-2019-18848 boo#1156649

Affected Packages

ruby2.5-rubygem-aes_key_wrap

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.1.0-bp155.2.1

ruby2.5-rubygem-aes_key_wrap-doc

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.1.0-bp155.2.1

ruby2.5-rubygem-json-jwt

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.16.6-bp155.3.3.1

ruby2.5-rubygem-json-jwt-doc

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.16.6-bp155.3.3.1

rubygem-aes_key_wrap

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.1.0-bp155.2.1

rubygem-json-jwt

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

1.16.6-bp155.3.3.1

References