json-c: Multiple vulnerabilities — GLSA 202006-13

Multiple vulnerabilities have been found in json-c, the worst of which could result in a Denial of Service condition.

Package	dev-libs/json-c on all architectures
Affected versions	< 0.14-r3
Unaffected versions	>= 0.14-r3

json-c is a JSON implementation in C.

Multiple vulnerabilities have been discovered in json-c. Please review the CVE identifiers referenced below for details.

A remote/local attacker could send a specially crafted file possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All json-c users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-libs/json-c-0.14-r3"

Release date
June 15, 2020

Latest revision
June 15, 2020: 1

Severity
normal

Exploitable
remote

Bugzilla entries