UbuntuUpdates.org

Package "libjson-c4"

Name: libjson-c4

Description:

JSON manipulation library - shared library
Latest version: 0.13.1+dfsg-7ubuntu0.3
Release: focal (20.04)
Level: security
Repository: main
Head package: json-c
Homepage: https://github.com/json-c/json-c/wiki

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libjson-c4"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libjson-c4" in Focal

Repository Area Version
base main 0.13.1+dfsg-7
updates main 0.13.1+dfsg-7ubuntu0.3

Changelog

Version: 0.13.1+dfsg-7ubuntu0.3 2020-05-28 13:07:11 UTC

  json-c (0.13.1+dfsg-7ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c, test4.c
      test4.expected, also adds the fix for the INT_MAX regression caused in update
      0.11-4ubuntu2.1.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 25 May 2020 14:59:26 -0300
Source diff to previous version
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Version: 0.13.1+dfsg-7ubuntu0.2 2020-05-15 14:06:35 UTC

  json-c (0.13.1+dfsg-7ubuntu0.2) focal-security; urgency=medium

  * Revert the security fixes and rebuild the old version (LP: #1878723)

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 12:31:48 +0100
Source diff to previous version
1878723 Kernel panic when used with upstart after 0.11-4ubuntu2.1 update

Version: 0.13.1+dfsg-7ubuntu0.1 2020-05-14 19:06:28 UTC

  json-c (0.13.1+dfsg-7ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in arraylist.c,
      linkhash.c, printbuf.c.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 11 May 2020 15:44:39 -0300
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.


About   -   Send Feedback to @ubuntu_updates