Lucene search

K
rockyRockylinux Product ErrataRLSA-2023:6551
HistoryMay 10, 2024 - 2:32 p.m.

yajl security update

2024-05-1014:32:38
Rockylinux Product Errata
errata.rockylinux.org
3
yajl
security update
rocky linux 9.3
cvss
memory leak
cve-2023-33460
json parser
ansi c

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.0%

An update is available for yajl.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

  • yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.