Описание
ELSA-2014-0703: json-c security update (MODERATE)
[0.11-4]
- fix has collision CVE-2013-6371
- fix buffer overflow CVE-2013-6370
- enable upstream test suite
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
json-c
0.11-4.el7_0
json-c-devel
0.11-4.el7_0
json-c-doc
0.11-4.el7_0
Oracle Linux x86_64
json-c
0.11-4.el7_0
json-c-devel
0.11-4.el7_0
json-c-doc
0.11-4.el7_0
Связанные CVE
Связанные уязвимости
ALT-PU-2019-4163: package `json-c` update to version 0.13.1-alt1
ALT-PU-2014-1691: package `json-c` update to version 0.12-alt1
ALT-PU-2023-6481: package `json-c` update to version 0.17-alt1
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.