Summary
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced
a memory leak in some scenarios. This update reverts the security fix
pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that json-c incorrectly handled certain JSON files.
An attacker could possibly use this issue to execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | json-c | 0.11-4ubuntu2.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | json-c | 0.12.1-1.3ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | json-c | 0.13.1+dfsg-7ubuntu0.2 |
References
-
report
https://launchpad.net/bugs/1878723