UBUNTU-CVE-2022-24795

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-24795

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-24795

Related

Published

2022-04-05T16:15:00Z

Modified

2024-10-15T14:09:48Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at yajl_buf.c#L64 may result in the need 32bit integer wrapping to 0 when need approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf->alloc into a small heap chunk. These integers are declared as size_t in the 2.x branch of yajl, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which size_t is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.

References

Affected packages

Ubuntu:Pro:14.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4-4ubuntu0.1~esm1

Affected versions

2.*

2.0.4-4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl-dev-dbgsym"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl2-dbg"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "libyajl2-dbgsym"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.0.4-4ubuntu0.1~esm1",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-2ubuntu0.16.04.1~esm1

Affected versions

2.*

2.1.0-2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl-dev-dbgsym"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl2-dbg"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "libyajl2-dbgsym"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.16.04.1~esm1",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.7.0+repack-4

1.8.2+repack-1

1.8.3+repack-1

1.8.3+repack-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.48-4.1

1.3.48-4.1build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / collada2gltf

Package

Name: collada2gltf
Purl: pkg:deb/ubuntu/collada2gltf?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

20140924-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.8-1build1

2.3.11-1

2.4.0-1

2.4.1-1

2.4.1-2

2.4.1-2ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / libbson

Package

Name: libbson
Purl: pkg:deb/ubuntu/libbson?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.1-1

1.3.1-1ubuntu0.1~esm1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.7.0-3build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.2-2~ubuntu1

1.1.5-1~build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.9.19-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.0-3build1

1.2.0-3build2

1.2.0-3build3

1.2.0-3build4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / tulip

Package

Name: tulip
Purl: pkg:deb/ubuntu/tulip?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.7.0dfsg-1ubuntu1

4.7.0dfsg-1ubuntu2

4.7.0dfsg-2ubuntu1

4.7.0dfsg-2ubuntu2

4.8.0dfsg-1

4.8.0dfsg-1build1

4.8.0dfsg-2

4.8.0dfsg-2build1

4.8.0dfsg-2build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-2ubuntu0.18.04.1~esm1

Affected versions

2.*

2.1.0-2

2.1.0-2build1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "libyajl2-dbg"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.1.0-2ubuntu0.18.04.1~esm1",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.9.2+repack-1

1.9.2+repack-2

2.*

2.0.0+repack-1build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.54-1

2.0.54-4build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / collada2gltf

Package

Name: collada2gltf
Purl: pkg:deb/ubuntu/collada2gltf?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

20140924-4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.7.0-1

2.8.1-0ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / libbson

Package

Name: libbson
Purl: pkg:deb/ubuntu/libbson?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.0-1

1.8.1-1

1.9.0-1

1.9.2-1

1.9.2-1ubuntu0.1~esm2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.8.2-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.3-1build1

1.3.4-1build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2-1build1

1.5-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.0-3build4

1.2.0-3.1

1.3.1-1

1.3.1-1build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.1+repack-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.2.18-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.10.5-1build1

2.11.2-1

2.11.2-1ubuntu1

2.11.2-1ubuntu2

2.11.2-1ubuntu3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.8.4-5build1

0.8.5-2

0.8.5-2build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5.5-1build1

1.6.1-4

1.6.1-4build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6+dfsg-1

1.6.1+dfsg-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.1-1build1

1.3.1-1build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-3ubuntu0.20.04.1

Affected versions

2.*

2.1.0-3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "libyajl2-dbgsym"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.20.04.1",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.1+repack-2

2.2.0+repack-1

2.2.0+repack-1build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.2.18-8ubuntu2

2.4.0-3ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / collada2gltf

Package

Name: collada2gltf
Purl: pkg:deb/ubuntu/collada2gltf?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

20140924-7build1

20140924-8

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.12.3-1

2.13.1-1

2.13.2-1

2.13.2-1build1

2.13.2-1build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.9.0-1

0.9.0-2ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.9.0+1.7.5-2build2

1.11.1+1.9.2+1.7.5-4

1.12.0+1.9.2+1.7.5-3

1.12.0+1.9.2+1.7.5-4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.7.2+dfsg-1

1.7.3+dfsg-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.1-1

1.4.1-1build1

1.4.1-1build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / tulip

Package

Name: tulip
Purl: pkg:deb/ubuntu/tulip?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0+dfsg-3

5.4.0+dfsg-3build1

5.4.0+dfsg-3build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-3ubuntu0.22.04.1

Affected versions

2.*

2.1.0-3

2.1.0-3build1

2.1.0-3build2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "libyajl2-dbgsym"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.1.0-3ubuntu0.22.04.1",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}

Ubuntu:24.10 / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.1.0+repack-1build4

3.1.0+repack-1.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.1.4-3.1build3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.14.2-1build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.11.2-1build3

0.12.2-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.8+dfsg-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.3-1build4

1.4.3-1build5

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / tulip

Package

Name: tulip
Purl: pkg:deb/ubuntu/tulip?arch=src?distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0+dfsg-3.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / argyll

Package

Name: argyll
Purl: pkg:deb/ubuntu/argyll?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.1+repack-1ubuntu2

3.*

3.1.0+repack-1

3.1.0+repack-1build2

3.1.0+repack-1build3

3.1.0+repack-1build4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / burp

Package

Name: burp
Purl: pkg:deb/ubuntu/burp?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.1.4-1

3.1.4-3

3.1.4-3ubuntu1

3.1.4-3.1

3.1.4-3.1build1

3.1.4-3.1build2

3.1.4-3.1build3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / icinga2

Package

Name: icinga2
Purl: pkg:deb/ubuntu/icinga2?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.13.8-1

2.14.1-1

2.14.2-1

2.14.2-1build1

2.14.2-1build2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / lnav

Package

Name: lnav
Purl: pkg:deb/ubuntu/lnav?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.11.2-1

0.11.2-1build2

0.11.2-1build3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / php-mongodb

Package

Name: php-mongodb
Purl: pkg:deb/ubuntu/php-mongodb?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.15.0+1.11.1+1.9.2+1.7.5-1build1

1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu1

1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu2

1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / r-cran-jsonlite

Package

Name: r-cran-jsonlite
Purl: pkg:deb/ubuntu/r-cran-jsonlite?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.5+dfsg-1

1.8.7+dfsg-1

1.8.8+dfsg-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / ruby-yajl

Package

Name: ruby-yajl
Purl: pkg:deb/ubuntu/ruby-yajl?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.3-1build2

1.4.3-1build3

1.4.3-1build4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / yajl

Package

Name: yajl
Purl: pkg:deb/ubuntu/yajl?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-5

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.1.0-5",
            "binary_name": "libyajl-dev"
        },
        {
            "binary_version": "2.1.0-5",
            "binary_name": "libyajl-doc"
        },
        {
            "binary_version": "2.1.0-5",
            "binary_name": "libyajl2"
        },
        {
            "binary_version": "2.1.0-5",
            "binary_name": "libyajl2-dbgsym"
        },
        {
            "binary_version": "2.1.0-5",
            "binary_name": "yajl-tools"
        },
        {
            "binary_version": "2.1.0-5",
            "binary_name": "yajl-tools-dbgsym"
        }
    ]
}