Ubuntu 22.10: USN-6011-1 Critical: Json-Smart Memory Issue

ubuntu

April 12, 2023

Several security issues were fixed in Json-smart.

Summary

Several security issues were fixed in Json-smart.

Software Description:

- json-smart: JSON Small and Fast Parser

Details:

It was discovered that Json-smart incorrectly handled memory

when processing input containing unclosed quotes.

A remote attacker could possibly use this issue to cause

applications using Json-smart to crash, leading to a

denial of service. (CVE-2021-31684)

It was discovered that Json-smart incorrectly handled memory

when processing input containing unclosed brackets.

A remote attacker could possibly use this issue to cause

applications using Json-smart to crash, leading to a

denial of service. (CVE-2023-1370)

Topics Covered

security advisory denial of service memory issue ubuntu json-smart

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   libjson-smart-java              2.2-2ubuntu0.22.10.1

Ubuntu 22.04 LTS:
   libjson-smart-java              2.2-2ubuntu0.22.04.1

Ubuntu 20.04 LTS:
   libjson-smart-java              2.2-2ubuntu0.20.04.1

Ubuntu 18.04 LTS:
   libjson-smart-java              2.2-2ubuntu0.18.04.1

In general, a standard system update will make all the necessary changes.