-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Sep 2026 20:27:32 -0500
Source: ruby-oj
Binary: ruby-oj ruby-oj-dbgsym
Architecture: ppc64el
Version: 3.16.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Description:
 ruby-oj    - fast JSON parser and serializer for Ruby
Changes:
 ruby-oj (3.16.3-1+deb13u1) trixie-security; urgency=high
 .
   * Fix multiple memory-safety issues in the Oj C extension:
     - CVE-2026-54502 / CVE-2026-54896: clamp extreme :indent (stack/heap
       overflow)
     - CVE-2026-54897: Oj::Doc iterator use-after-free on reentrant close
     - CVE-2026-54898: parser use-after-free when callbacks mutate input
     - CVE-2026-54899: symbol_keys cache use-after-free
     - CVE-2026-54900: create_id / form_attr negative-size memcpy
     - CVE-2026-54901: unmarked hash_class / array_class GC use-after-free
     - CVE-2026-54902: SAJ long-key use-after-free
     - CVE-2026-54903: integer overflow / heap corruption on >2GB strings
     - CVE-2026-54500: uninitialized / OOB read on long keys in intern.c
     - CVE-2026-54592: stack overflow in Oj::Doc#each_child on deep nesting
Checksums-Sha1:
 a469e9e6ecd20986c9558e57b9a564817669c5ef 494964 ruby-oj-dbgsym_3.16.3-1+deb13u1_ppc64el.deb
 d24b7e1edc7addfd1e5c82d4037589a63df1c572 8839 ruby-oj_3.16.3-1+deb13u1_ppc64el-buildd.buildinfo
 2e7de0f23d87561faeaa822dc0983f2ea18f74fe 194580 ruby-oj_3.16.3-1+deb13u1_ppc64el.deb
Checksums-Sha256:
 20c4040914ba844dba8204465a45e14323567e70d4f1922795db6b56f776bf73 494964 ruby-oj-dbgsym_3.16.3-1+deb13u1_ppc64el.deb
 c7baec9f2556b6ea0fcafc6a39cc21e6ebe58706647916b665cf595f439ca3d0 8839 ruby-oj_3.16.3-1+deb13u1_ppc64el-buildd.buildinfo
 2f3bdb1752ac8131fade1c39b88037c6897316a38e5cc6fefb406ae9ba8cd1cb 194580 ruby-oj_3.16.3-1+deb13u1_ppc64el.deb
Files:
 1c20f6f9ac3573717fc09ef468b42619 494964 debug optional ruby-oj-dbgsym_3.16.3-1+deb13u1_ppc64el.deb
 7d9a84b2faa681ca6c86b42eb0b99ba0 8839 ruby optional ruby-oj_3.16.3-1+deb13u1_ppc64el-buildd.buildinfo
 96990cf5715018bfceece8f27f77c323 194580 ruby optional ruby-oj_3.16.3-1+deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=M1n5
-----END PGP SIGNATURE-----