unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#41525: CVE-2020-12762: json-c
@ 2020-05-25 12:06 Lars-Dominik Braun
  2020-10-21  4:27 ` Maxim Cournoyer
  0 siblings, 1 reply; 2+ messages in thread
From: Lars-Dominik Braun @ 2020-05-25 12:06 UTC (permalink / raw)
  To: 41525

Hi,

our package json-c is vulnerable to CVE-2020-12762[1]. Be careful when
applying the “fix”, since it broke a lot of packages on Ubuntu and
Gentoo[2] in the past week.

Lars

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-12762
[2] https://bugs.gentoo.org/722150





^ permalink raw reply	[flat|nested] 2+ messages in thread

* bug#41525: CVE-2020-12762: json-c
  2020-05-25 12:06 bug#41525: CVE-2020-12762: json-c Lars-Dominik Braun
@ 2020-10-21  4:27 ` Maxim Cournoyer
  0 siblings, 0 replies; 2+ messages in thread
From: Maxim Cournoyer @ 2020-10-21  4:27 UTC (permalink / raw)
  To: Lars-Dominik Braun; +Cc: 41525-done

Hello,

Lars-Dominik Braun <lars@6xq.net> writes:

> Hi,
>
> our package json-c is vulnerable to CVE-2020-12762[1]. Be careful when
> applying the “fix”, since it broke a lot of packages on Ubuntu and
> Gentoo[2] in the past week.
>
> Lars
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2020-12762
> [2] https://bugs.gentoo.org/722150

Thanks for the report!

This was fixed by Efraim on the 6th of August, with commit
10b40489742bdaa0d193c00dff1446b11c081f6a.

Closing,

Maxim




^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2020-10-21  4:28 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-05-25 12:06 bug#41525: CVE-2020-12762: json-c Lars-Dominik Braun
2020-10-21  4:27 ` Maxim Cournoyer

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).