[ALSA-2022:8252] Moderate: yajl security update
Type:
security
Severity:
moderate
Release date:
2022-11-18
Description:
Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 yajl-devel-2.1.0-21.el9.aarch64.rpm 77bb19f4420d72a2f118921a076e94592d5921116ecdfad4849bf4702d24dbb4
aarch64 yajl-2.1.0-21.el9.aarch64.rpm cbf3d8477e48def168d4e8d52b56c395da9301accfa20a72f41ef4c6e06f3c91
i686 yajl-devel-2.1.0-21.el9.i686.rpm c6cbb3373e197a77a0bd69fa0261253553691e6c0d3f64406ce35dc605172148
i686 yajl-2.1.0-21.el9.i686.rpm e3c1080bd728fcca4cd225027a5f0a3cdca45dd3793113ed440a404d678c0148
ppc64le yajl-2.1.0-21.el9.ppc64le.rpm 74b71a14e6c2a92fa1017c1161f525848caffff2f98db8911072dca4fa663c11
ppc64le yajl-devel-2.1.0-21.el9.ppc64le.rpm a9d6343b6519c7a47f470397e8cac7fbf6b6bb6bbfa34353e4b622f68971328a
s390x yajl-devel-2.1.0-21.el9.s390x.rpm 4824643d9d415ef368b5a9501ade5510dd10223c8248793d2af79650a2072e25
s390x yajl-2.1.0-21.el9.s390x.rpm abb1f940d171238b3d165c8818b677c36cff267d3e154fbc10080e41badd6a6a
x86_64 yajl-devel-2.1.0-21.el9.x86_64.rpm 04a9fc3f025fe48b8e9ef7e4b1722557f7811bce2029bd7cedc3510ce41cfcc5
x86_64 yajl-2.1.0-21.el9.x86_64.rpm 3f7a315389d0f075b2e8b77ef6346d80563122beb2216e4323e6d260ae129790
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.