USN-6784-1: cJSON vulnerabilities ›
23 May 2024
cJSON could be made to crash if it received specially crafted input.
Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package.
To report a security vulnerability in an Ubuntu package, please contact the Security Team.
The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.
23 May 2024
cJSON could be made to crash if it received specially crafted input.
23 May 2024
Several security issues were fixed in the Linux kernel.
CVE-2024-26635 , CVE-2021-46981 , CVE-2023-52566 , and 14 others
23 May 2024
Several security issues were fixed in klibc.
CVE-2016-9841 , CVE-2022-37434 , CVE-2016-9840 , and 1 other
23 May 2024
Add implicit rejection in PKCS#1 v1.5 in OpenSSL.
22 May 2024
VLC could be made to crash or run programs if it received specially crafted network traffic.
22 May 2024
Several security issues were fixed in Thunderbird.
CVE-2024-4767 , CVE-2024-4769 , CVE-2024-4770 , and 3 others
21 May 2024
Several security issues were fixed in the Linux kernel.
21 May 2024
Several security issues were fixed in the Linux kernel.
CVE-2024-26614 , CVE-2021-46981 , CVE-2023-52602 , and 14 others
21 May 2024
idna could be made to consume significant resources if it receives a specially crafted input.
21 May 2024
Spreadsheet::ParseExcel could possibly run commands if it processed a specially crafted file.