From 5f92db082a7c93b0c7fecc6b9f3c25e39ca288c2 Mon Sep 17 00:00:00 2001 From: Florian Frank Date: Thu, 23 Mar 2017 14:26:12 +0100 Subject: Fix some problems thay may lead to ruby crashing - Raise exception for incomplete unicode surrogates/character escape sequences - Fix arbitrary heap exposure problem --- CHANGES.md | 5 +++++ VERSION | 2 +- json.gemspec | Bin 5474 -> 5474 bytes json_pure.gemspec | 4 ++-- lib/json/version.rb | 2 +- 5 files changed, 9 insertions(+), 4 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index a8724c1..197087a 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,5 +1,10 @@ # Changes +## 2017-03-23 (2.0.4) + * Raise exception for incomplete unicode surrogates/character escape + sequences. This problem was reported by Daniel Gollahon (dgollahon). + * Fix arbitrary heap exposure problem. This problem was reported by Ahmad + Sherif (ahmadsherif). ## 2017-01-12 (2.0.3) * Set `required_ruby_version` to 1.9 diff --git a/VERSION b/VERSION index 50ffc5a..2165f8f 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.0.3 +2.0.4 diff --git a/json.gemspec b/json.gemspec index 52c08c8..40cc40e 100644 Binary files a/json.gemspec and b/json.gemspec differ diff --git a/json_pure.gemspec b/json_pure.gemspec index 1ae9a65..9ca588c 100644 --- a/json_pure.gemspec +++ b/json_pure.gemspec @@ -1,9 +1,9 @@ # -*- encoding: utf-8 -*- -# stub: json_pure 2.0.3 ruby lib +# stub: json_pure 2.0.4 ruby lib Gem::Specification.new do |s| s.name = "json_pure".freeze - s.version = "2.0.3" + s.version = "2.0.4" s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version= s.require_paths = ["lib".freeze] diff --git a/lib/json/version.rb b/lib/json/version.rb index 0f9bbf2..b88dfb6 100644 --- a/lib/json/version.rb +++ b/lib/json/version.rb @@ -1,7 +1,7 @@ # frozen_string_literal: false module JSON # JSON version - VERSION = '2.0.3' + VERSION = '2.0.4' VERSION_ARRAY = VERSION.split(/\./).map { |x| x.to_i } # :nodoc: VERSION_MAJOR = VERSION_ARRAY[0] # :nodoc: VERSION_MINOR = VERSION_ARRAY[1] # :nodoc: -- cgit v1.2.1