UbuntuUpdates.org

Package "json-c"

Name: json-c

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • JSON manipulation library - development files
  • JSON manipulation library - documentation files
  • JSON manipulation library - shared library
  • JSON manipulation library - debug symbols
Latest version: 0.11-4ubuntu2.6
Release: xenial (16.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "json-c" in Xenial

Repository Area Version
base main 0.11-4ubuntu2
updates main 0.11-4ubuntu2.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.11-4ubuntu2.6 2020-05-28 13:06:46 UTC

  json-c (0.11-4ubuntu2.6) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c, test4.c
      test4.expected, also adds the fix for the INT_MAX regression caused in update
      0.11-4ubuntu2.1.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 25 May 2020 11:00:53 -0300
Source diff to previous version
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Version: 0.11-4ubuntu2.5 2020-05-15 20:06:32 UTC

  json-c (0.11-4ubuntu2.5) xenial-security; urgency=medium

  * Don't call telinit from the postinst when running on upstart systems
    if upgrading from 0.11-4ubuntu2.1.

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 14:51:30 +0100
Source diff to previous version

Version: 0.11-4ubuntu2.2 2020-05-15 14:06:27 UTC

  json-c (0.11-4ubuntu2.2) xenial-security; urgency=medium

  * Revert the security fixes and rebuild the old version (LP: #1878723)

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 12:11:57 +0100
Source diff to previous version
1878723 Kernel panic when used with upstart after 0.11-4ubuntu2.1 update

Version: 0.11-4ubuntu2 2020-05-15 12:06:19 UTC

  json-c (0.11-4ubuntu2) vivid; urgency=medium

  * No change rebuild to get debug symbols on all architectures.
 -- Brian Murray <email address hidden> Mon, 12 Jan 2015 08:18:41 -0800
Source diff to previous version

Version: 0.11-4ubuntu2.1 2020-05-14 19:06:21 UTC

  json-c (0.11-4ubuntu2.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 12 May 2020 10:30:28 -0300
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.


About   -   Send Feedback to @ubuntu_updates