Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 14.04 ESM and 12.04 ESM: USN-4360-3 Moderate json-c Regression

ubuntu
Calendar Grey May 15, 2020
Dist Ubuntu Esm H88
Ubuntu has released USN-4360-3 to fix a regression in json-c impacting security and stability. Users should update their packages for protection
USN-4360-1 introduced a regression in json-c.

Summary

USN-4360-1 introduced a regression in json-c.

Software Description:

- json-c: JSON manipulation library

Details:

USN-4360-1 fixed a vulnerability in json-c. The security fix introduced

a memory leak in some scenarios. This update reverts the security fix

pending further investigation.

We apologize for the inconvenience.

Original advisory details:

It was discovered that json-c incorrectly handled certain JSON files.

An attacker could possibly use this issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory memory leak arbitrary code regression Ubuntu 14.04 json-c Ubuntu 12.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libjson-c2                      0.11-3ubuntu1.2+esm2
  libjson0                        0.11-3ubuntu1.2+esm2

Ubuntu 12.04 ESM:
  libjson0                        0.9-1ubuntu1.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4360-1

https://bugs.launchpad.net/ubuntu/+source/json-c/+bug/1878723

May 15, 2020

Topics%20covered

Topics Covered

security advisory memory leak arbitrary code regression Ubuntu 14.04 json-c Ubuntu 12.04

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here