Package: yajl / 2.1.0-3+deb12u2
Metadata
| Package | Version | Patches format |
|---|---|---|
| yajl | 2.1.0-3+deb12u2 | 3.0 (quilt) |
Patch series
view the series file| Patch | File delta | Description |
|---|---|---|
| dynamically link tools.patch | (download) |
reformatter/CMakeLists.txt |
2 1 + 1 - 0 ! |
--- |
| multiarch.patch | (download) |
src/CMakeLists.txt |
10 5 + 5 - 0 ! |
--- |
| CVE 2017 16516.patch | (download) |
src/yajl_encode.c |
4 2 + 2 - 0 ! |
fix for cve-2017-16516 Potential buffer overread: A JSON file can cause denial of service. |
| CVE 2022 24795.patch | (download) |
src/yajl_buf.c |
12 11 + 1 - 0 ! |
fix for cve-2022-24795 An integer overflow will lead to heap memory corruption with large (~2GB) inputs. |
| CVE 2023 33460.patch | (download) |
src/yajl_tree.c |
9 8 + 1 - 0 ! |
fix for cve-2023-33460a Memory leak in yajl 2.1.0 with use of yajl_tree_parse function See https://github.com/lloyd/yajl/issues/250#issuecomment-1628695214 |
