-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Sep 2026 20:27:32 -0500
Source: ruby-oj
Binary: ruby-oj ruby-oj-dbgsym
Architecture: s390x
Version: 3.16.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Description:
 ruby-oj    - fast JSON parser and serializer for Ruby
Changes:
 ruby-oj (3.16.3-1+deb13u1) trixie-security; urgency=high
 .
   * Fix multiple memory-safety issues in the Oj C extension:
     - CVE-2026-54502 / CVE-2026-54896: clamp extreme :indent (stack/heap
       overflow)
     - CVE-2026-54897: Oj::Doc iterator use-after-free on reentrant close
     - CVE-2026-54898: parser use-after-free when callbacks mutate input
     - CVE-2026-54899: symbol_keys cache use-after-free
     - CVE-2026-54900: create_id / form_attr negative-size memcpy
     - CVE-2026-54901: unmarked hash_class / array_class GC use-after-free
     - CVE-2026-54902: SAJ long-key use-after-free
     - CVE-2026-54903: integer overflow / heap corruption on >2GB strings
     - CVE-2026-54500: uninitialized / OOB read on long keys in intern.c
     - CVE-2026-54592: stack overflow in Oj::Doc#each_child on deep nesting
Checksums-Sha1:
 0ea8fce696f612c9837439ad98ec39e8f37814d1 489960 ruby-oj-dbgsym_3.16.3-1+deb13u1_s390x.deb
 98278dc414d5ebcf439d305f83d7d948fb973290 8702 ruby-oj_3.16.3-1+deb13u1_s390x-buildd.buildinfo
 b2a39b9a4268116e65cfd2198d4a2ea561ba22cd 187932 ruby-oj_3.16.3-1+deb13u1_s390x.deb
Checksums-Sha256:
 c1a39c673900ac8670a8f0fd06a5adc98d0b2f072f67517465adb4646428ca5c 489960 ruby-oj-dbgsym_3.16.3-1+deb13u1_s390x.deb
 fbbd19caa3b75113db63536bba1f13648b097e791904381833e87a7dff63bb76 8702 ruby-oj_3.16.3-1+deb13u1_s390x-buildd.buildinfo
 7deb53d970975133ccae3cd066ff99015ce93007b2c60c030bb96ad8988717d6 187932 ruby-oj_3.16.3-1+deb13u1_s390x.deb
Files:
 5a8a7a4183024f2c5d86adc411cf05c1 489960 debug optional ruby-oj-dbgsym_3.16.3-1+deb13u1_s390x.deb
 446093e0aa4dcb92779bbec1f7563694 8702 ruby optional ruby-oj_3.16.3-1+deb13u1_s390x-buildd.buildinfo
 061436bc595d13b3fe1318f5229fdccf 187932 ruby optional ruby-oj_3.16.3-1+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=U9Vy
-----END PGP SIGNATURE-----