oss-security - libjson-ruby: catastrophic backtracking

Date: Tue, 10 Nov 2009 17:18:45 -0500
From: Michael Gilbert <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: libjson-ruby: catastrophic backtracking

hi all,

should a cve id be issued for the following "catastrophic
backtracking" issue in libjson-ruby?

http://rubyforge.org/frs/shownotes.php?release_id=36363
http://bugs.debian.org/555516 (note two separate issues fixed there)

thanks,
mike

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.