UbuntuUpdates.org

Package "libjson-c3"

Name: libjson-c3

Description:

JSON manipulation library - shared library
Latest version: 0.12.1-1.3ubuntu0.3
Release: bionic (18.04)
Level: updates
Repository: main
Head package: json-c
Homepage: https://github.com/json-c/json-c/wiki

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libjson-c3"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libjson-c3" in Bionic

Repository Area Version
base main 0.12.1-1.3
security main 0.12.1-1.3ubuntu0.3

Changelog

Version: 0.12.1-1.3ubuntu0.3 2020-05-28 14:07:58 UTC

  json-c (0.12.1-1.3ubuntu0.3) bionic-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c, test4.c
      test4.expected, also adds the fix for the INT_MAX regression caused in update
      0.11-4ubuntu2.1.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 25 May 2020 12:29:13 -0300
Source diff to previous version
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Version: 0.12.1-1.3ubuntu0.2 2020-05-15 14:06:32 UTC

  json-c (0.12.1-1.3ubuntu0.2) bionic-security; urgency=medium

  * Revert the security fixes and rebuild the old version (LP: #1878723)

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 12:33:56 +0100
Source diff to previous version
1878723 Kernel panic when used with upstart after 0.11-4ubuntu2.1 update

Version: 0.12.1-1.3ubuntu0.1 2020-05-14 21:07:10 UTC

  json-c (0.12.1-1.3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 11 May 2020 16:29:02 -0300
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.


About   -   Send Feedback to @ubuntu_updates