USN-7750-1

It was discovered that JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause JSON-XS to crash, resulting in a denial of service.

References

Affected packages

Ubuntu:22.04:LTS / libjson-xs-perl

Package

Name: libjson-xs-perl
Purl: pkg:deb/ubuntu/libjson-xs-perl@4.040-0ubuntu0.22.04.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.040-0ubuntu0.22.04.1

Affected versions

4.*

4.030-1build2

4.030-1build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libjson-xs-perl",
            "binary_version": "4.040-0ubuntu0.22.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.04:LTS / libjson-xs-perl

Package

Name: libjson-xs-perl
Purl: pkg:deb/ubuntu/libjson-xs-perl@4.040-0ubuntu0.24.04.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.040-0ubuntu0.24.04.1

Affected versions

4.*

4.030-2

4.030-2build1

4.030-2build2

4.030-2build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libjson-xs-perl",
            "binary_version": "4.040-0ubuntu0.24.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.04 / libjson-xs-perl

Package

Name: libjson-xs-perl
Purl: pkg:deb/ubuntu/libjson-xs-perl@4.040-0ubuntu0.25.04.1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.040-0ubuntu0.25.04.1

Affected versions

4.*

4.030-2build3

4.030-2build4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libjson-xs-perl",
            "binary_version": "4.040-0ubuntu0.25.04.1"
        }
    ],
    "availability": "No subscription required"
}