Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41 cjson Advisory FEDORA-2024-82f3634c69 critical: segfault fix

fedora
Calendar Grey October 2, 2024
Dist Fedora Esm H88
Fedora Project has issued a vital security advisory for cjson v41 to prevent a segmentation fault vulnerability. Users should update their systems immediately to ensure security
Update to new upstream version (closes rhbz#2237124)

Summary

cJSON aims to be the dumbest possible parser that you can get your job

done with. It's a single file of C, and a single header file.

Update Information:

Update to new upstream version (closes rhbz#2237124)

Topics%20covered

Topics Covered

security advisory update Fedora software fix segmentation violation cjson JSON parser

Change Log

* Thu Sep 26 2024 Fabian Affolter - 1.7.18-1 - Update to new upstream version (closes rhbz#2237124) - Fix rhbz#2277268, closes rhbz#2277269

References


[ 1 ] Bug #2277268 - CVE-2024-31755 cjson: segmentation violation trigger through the second parameter of function cJSON_SetValuestring at cJSON.c https://bugzilla.redhat.com/show_bug.cgi?id=2277268

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-82f3634c69' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: cjson
Product: Fedora 41
Version: 1.7.18
Release: 1.fc41
URL: https://github.com/DaveGamble/cJSON
Summary: Ultralightweight JSON parser in ANSI C

Topics%20covered

Topics Covered

security advisory update Fedora software fix segmentation violation cjson JSON parser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here