Medium ELSA-2021-4382 1 CVE

Moderate: json-c security and bug fix update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[0.13.1-2]
- rebuild (#1954436)

[0.13.1-1]
- Fix CVE-2020-12762 out-of-bounds write via a large JSON file
- Resolves: rhbz#1835626

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	json-c	0:0.13.1-2.el8
Oracle Linux · 8	json-c-devel	0:0.13.1-2.el8
Oracle Linux · 8	json-c-doc	0:0.13.1-2.el8

Vulnerabilities 1

High 7.8

CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_…

json-c json-c json-c libfastjson Debian Ubuntu Azure Linux Alpine

May 9, 2020