--===============4095717881384189187==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="EeQfGwPcQSOJBaQU"
Content-Disposition: inline


--EeQfGwPcQSOJBaQU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-4360-3
May 15, 2020

json-c regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM

Summary:

USN-4360-1 introduced a regression in json-c.

Software Description:
- json-c: JSON manipulation library

Details:

USN-4360-1 fixed a vulnerability in json-c. The security fix introduced
a memory leak in some scenarios. This update reverts the security fix
pending further investigation.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that json-c incorrectly handled certain JSON files.
 An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libjson-c2                      0.11-3ubuntu1.2+esm2
  libjson0                        0.11-3ubuntu1.2+esm2

Ubuntu 12.04 ESM:
  libjson0                        0.9-1ubuntu1.3

In general, a standard system update will make all the necessary changes.

References:
  https://usn.ubuntu.com/4360-3
  https://usn.ubuntu.com/4360-1
  https://launchpad.net/bugs/1878723

--EeQfGwPcQSOJBaQU
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=M0J4
-----END PGP SIGNATURE-----

--EeQfGwPcQSOJBaQU--


--===============4095717881384189187==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce