Adrian Freihofer d01be5cf84 json-c: fix CVE-2021-32292 ...

This is a read past end of buffer issue in the json_parse test app,
which can happened with malformed json data. It's not an issue with the
library itself. For what ever reason this CVE has a base score of 9.8.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2021-32292

Upstream issue:
https://github.com/json-c/json-c/issues/654

The CVE is fixed with version 0.16 (which is already in all active
branches of poky).

(From OE-Core rev: a7b93651028b55d71b8db53ea831eee7fd539f33)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2023-09-08 16:09:41 -10:00

..

json-c

json-c: fix CVE-2021-32292

2023-09-08 16:09:41 -10:00

json-c_0.15.bb

json-c: fix CVE-2021-32292

2023-09-08 16:09:41 -10:00