Several security issues were fixed in UltraJSON.. ========================================================================== Ubuntu Security Notice USN-8219-1 April 28, 2026 ujson vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in UltraJSON. Software Description: - ujson: Ultra fast JSON encoder and decoder Details: Cameron Criswell discovered that UltraJSON contained a memory leak that would occur when parsing large integers. An attacker could possibly use this issue to cause UltraJSON to crash, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-32874) It was discovered that UltraJSON contained integer overflow/underflow issues when calculating how much memory to reserve for indentation in certain instances. An attacker could possibly use this issue to cause UltraJSON to crash, resulting in a denial of service. (CVE-2026-32875) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS python3-ujson 5.11.0-3ubuntu0.1 Ubuntu 25.10 python3-ujson 5.10.0-1ubuntu0.1 Ubuntu 24.04 LTS python3-ujson 5.9.0-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS python3-ujson 5.1.0-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8219-1 CVE-2026-32874, CVE-2026-32875 Package Information: https://launchpad.net/ubuntu/+source/ujson/5.11.0-3ubuntu0.1 https://launchpad.net/ubuntu/+source/ujson/5.10.0-1ubuntu0.1 . Multiple security issues in UltraJSON on various Ubuntuversions require immediate attention for safe operation.. UltraJSON Security Update, Ubuntu LTS, JSON Encoding Security. . Severity: Important. LinuxSecurity.com Team
Several security issues were fixed in UltraJSON.. ========================================================================== Ubuntu Security Notice USN-6629-3 February 14, 2024 ujson vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS (Available with Ubuntu Pro) Summary: Several security issues were fixed in UltraJSON. Software Description: - ujson: ultra fast JSON encoder and decoder for Python 3 Details: USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2021-45958) Jake Miller discovered that UltraJSON incorrectly decoded certain characters. An attacker could possibly use this issue to cause key confusion and overwrite values in dictionaries. (CVE-2022-31116) It was discovered that UltraJSON incorrectly handled an error when reallocating a buffer for string decoding. An attacker could possibly use this issue to corrupt memory. (CVE-2022-31117) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS (Available with Ubuntu Pro): python3-ujson 1.35-4ubuntu0.1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6629-3 https://ubuntu.com/security/notices/USN-6629-1 CVE-2022-31116, CVE-2022-31117 . The patched issues within libxml2 in Ubuntu 20.04 LTS highlighted in USN-6629-3 greatly enhance system security.. Ubuntu Security, Denial of Service, Memory Corruption, Python Security. . Severity: Critical. LinuxSecurity.com Team
UltraJSON could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-6629-2 February 14, 2024 ujson vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: UltraJSON could be made to crash if it received specially crafted input. Software Description: - ujson: ultra fast JSON encoder and decoder for Python 3 Details: USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2021-45958) Jake Miller discovered that UltraJSON incorrectly decoded certain characters. An attacker could possibly use this issue to cause key confusion and overwrite values in dictionaries. (CVE-2022-31116) It was discovered that UltraJSON incorrectly handled an error when reallocating a buffer for string decoding. An attacker could possibly use this issue to corrupt memory. (CVE-2022-31117) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: python3-ujson 1.35-4ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6629-2 https://ubuntu.com/security/notices/USN-6629-1 CVE-2021-45958 Package Information: https://launchpad.net/ubuntu/+source/ujson/1.35-4ubuntu0.1 . Ubuntu Security Alert USN-6629-2 addresses vulnerabilities linked to ujson, which could impact installed software and lead to possible crash scenarios.. ujson vulnerability,denial of service, UltraJSON, Ubuntu advisory, software update. . LinuxSecurity.com Team
One issue have been discovered in ujson: ultra fast JSON encoder and decoder for Python. CVE-2021-45958 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2929-1
Get the latest Linux and open source security news straight to your inbox.