[SECURITY] Fedora 42 Update: perl-Cpanel-JSON-XS-4.40-1.fc42

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C...

Fedora 41 : perl-Cpanel-JSON-XS (2025-89495f6403)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-89495f6403 advisory. This update fixes an issue where a specially-crafted JSON input could cause an integer overflow leading to a crash in the program parsing the JSON...

Fedora: Security Advisory (FEDORA-2025-f4f4dae8f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : perl-Cpanel-JSON-XS (2025-f4f4dae8f2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f4f4dae8f2 advisory. This update fixes an issue where a specially-crafted JSON input could cause an integer overflow leading to a crash in the program parsing the JSON...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Cpanel-JSON-XS vulnerability (USN-7749-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has a package installed that is affected by a vulnerability as referenced in the USN-7749-1 advisory. It was discovered that Cpanel-JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause...

USN-7749-1: Cpanel-JSON-XS vulnerability

It was discovered that Cpanel-JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause Cpanel-JSON-XS to crash, resulting in a denial of service...

SUSE SLES15 Security Update : perl-Cpanel-JSON-XS (SUSE-SU-2025:03193-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03193-1 advisory. - CVE-2025-40929: integer buffer overflow causing a segmentation fault when parsing crafted JSON bsc1249331. Tenable has extracted the preceding...

OESA-2025-2241 perl-Cpanel-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault...

SUSE-SU-2025:03193-1 Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: - CVE-2025-40929: integer buffer overflow causing a segmentation fault when parsing crafted JSON bsc1249331...

Fedora 43 : perl-Cpanel-JSON-XS (2025-ce67f2ffd1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ce67f2ffd1 advisory. This update fixes an issue where a specially-crafted JSON input could cause an integer overflow leading to a crash in the program parsing the JSON...

Linux Distros Unpatched Vulnerability : CVE-2025-40929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or...

Linux Distros Unpatched Vulnerability : CVE-2025-43920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman 2.1.39, as bundled in cPanel and WHM, in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands...

Linux Distros Unpatched Vulnerability : CVE-2025-43921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third partie...

Linux Distros Unpatched Vulnerability : CVE-2025-43919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailm...

OPENSUSE-SU-2025:15534-1 perl-Cpanel-JSON-XS-4.400.0-1.1 on GA media

These are all security issues fixed in the perl-Cpanel-JSON-XS-4.400.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

AZL-67088 CVE-2025-40929 affecting package perl-Cpanel-JSON-XS 4.39-1

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

ALPINE-CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

AZL-67086 CVE-2025-40929 affecting package perl-Cpanel-JSON-XS 4.27-2

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...