UbuntuUpdates.org

Package "libjson0"

Name: libjson0

Description:

JSON manipulation library (transitional package)
Latest version: 0.11-4ubuntu2.6
Release: xenial (16.04)
Level: updates
Repository: main
Head package: json-c
Homepage: https://github.com/json-c/json-c/wiki

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libjson0"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libjson0" in Xenial

Repository Area Version
base main 0.11-4ubuntu2
security main 0.11-4ubuntu2.6

Changelog

Version: 0.11-4ubuntu2.6 2020-05-28 14:07:48 UTC

  json-c (0.11-4ubuntu2.6) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c, test4.c
      test4.expected, also adds the fix for the INT_MAX regression caused in update
      0.11-4ubuntu2.1.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 25 May 2020 11:00:53 -0300
Source diff to previous version
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Version: 0.11-4ubuntu2.5 2020-05-15 20:06:33 UTC

  json-c (0.11-4ubuntu2.5) xenial-security; urgency=medium

  * Don't call telinit from the postinst when running on upstart systems
    if upgrading from 0.11-4ubuntu2.1.

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 14:51:30 +0100
Source diff to previous version

Version: 0.11-4ubuntu2.2 2020-05-15 14:06:29 UTC

  json-c (0.11-4ubuntu2.2) xenial-security; urgency=medium

  * Revert the security fixes and rebuild the old version (LP: #1878723)

 -- Chris Coulson <email address hidden> Fri, 15 May 2020 12:11:57 +0100
Source diff to previous version
1878723 Kernel panic when used with upstart after 0.11-4ubuntu2.1 update

Version: 0.11-4ubuntu2 2020-05-15 12:06:21 UTC

  json-c (0.11-4ubuntu2) vivid; urgency=medium

  * No change rebuild to get debug symbols on all architectures.
 -- Brian Murray <email address hidden> Mon, 12 Jan 2015 08:18:41 -0800
Source diff to previous version

Version: 0.11-4ubuntu2.1 2020-05-14 21:07:08 UTC

  json-c (0.11-4ubuntu2.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c.
    - CVE-2020-12762

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 12 May 2020 10:30:28 -0300
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.


About   -   Send Feedback to @ubuntu_updates