[SECURITY] [DLA 3700-1] cjson security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3700-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Thorsten Alteholz
December 30, 2023 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : cjson
Version : 1.7.10-1.1+deb10u2
CVE ID : CVE-2023-50471
An issue has been found in cjson, an ultralightweight JSON parser in ANSI
C. The issue is related to a segmentation violation in function
cJSON_InsertItemInArray().
For Debian 10 buster, this problem has been fixed in version
1.7.10-1.1+deb10u2.
We recommend that you upgrade your cjson packages.
For the detailed security status of cjson please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/cjson
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmWQZtNfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcACgkQlvysDTh7
WEdTTQ//aG9GOVmp51JdBvC53SthDgKBEATLxEekyKXE10JcxJ+lgiBG0rlgjzdH
+rHH6Qtf4UwOROi+iv2cD+jjN8rlzU+vowXT/FCSotcG4OWc5x/9xsB6MMykWjl0
2PlJobRPX3ERHg1HCjn9BpZBWJommSzh5lUVQcEMTLM+HZijjw5jX9ESVdOJsXwU
6AwwDN0jIdCZi5u/YeW/ACohlHBBmo/ucPVA4+HIcODlINOqTF0AE+hoQbKJ7nuO
Nqm+p55b5Ly6mdLVbQ8M6Y3FtQSF8G/8R1Ug7qvntJ6wqkze/ZlOl5j/btbCs/5K
gkvZBF5WdPA9GRnuBOQkWSbcMaUHP2B2QbNpEOuKzAhAbIwEEmm4dz7Cx0QSCoQH
wUOcUSwQn3I7/CbdGmuvksSM7PYP8eb2EA872Oynga1Ks1XvUZc11NfxcJz4P7+S
nk91xRNhLO5CG4JSjaPlBEVv0xu0ZiBjesymh4t2a6nTktsMV1uvm1oUWHLaHfTk
5odN2rlp+IQoF6BAuMdOXTQf771pYsNSS/EpQPOy0aYaCyJyNsxdQaMkQKZ+AKjy
vH6utM6fR6cWMbMTXnQrXTLzaxgMmMsLcK7Xy1mSPue4kOIkpDCizBhmAKDh3pAC
75lOBEMjieoa6EYic6lPNM486FWBJPAKfa/Ad2d97fSNM/3NekI=
=AmTc
-----END PGP SIGNATURE-----
Reply to: