SUSE: 2013:0609-1 Important: rubygem-json_pure Denial of Service

The json_pure Ruby Gem has been updated to fix a Denial of Service and Unsafe Object Creation vulnerability in JSON (CVE-2013-0269) Additional fixes: * Entity expansion DoS vulnerability in REXML (XML bomb) Security Issue reference: * CVE-2013-0269 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - WebYaST 1.2: zypper in -t patch slewyst12-rubygem-json_pure-7486 - SUSE Studio Standard Edition 1.2: zypper in -t patch sleslms12-rubygem-json_pure-7486 - SUSE Studio Extension for System z 1.2: zypper in -t patch slestso12-rubygem-json_pure-7486 To bring your system up-to-date, use "zypper patch". Package List: