CVE-2023-33460, ruby-yajl affected?

To: debian-security@lists.debian.org, Debian LTS <debian-lts@lists.debian.org>
Subject: CVE-2023-33460, ruby-yajl affected?
From: Anton Gladky <gladk@debian.org>
Date: Wed, 5 Jul 2023 06:52:48 +0200
Message-id: <[🔎] CALF6qJnB54MTcMXLFSj1vz1BA-J0mdUjEYGDjBiWrFk=ZLxVqg@mail.gmail.com>

Hello,

I am looking into CVE-2023-33460 and I am not sure that ruby-yajl

is affected. There is no direct dependency on yajl, where the vulnerability

was detected.

Should ruby-yajl be unmarked as affected by this CVE?

Thank you

Anton

Reply to:

Follow-Ups:
- Re: CVE-2023-33460, ruby-yajl affected?
  - From: Bastien Roucariès <bastien.roucaries@cyu.fr>

Next by Date: Re: CVE-2023-33460, ruby-yajl affected?
Next by thread: Re: CVE-2023-33460, ruby-yajl affected?
Index(es):
- Date
- Thread