DSA-5999-1 libjson-xs-perl - security update

Bulletin has no description...

DSA-6000-1 libcpanel-json-xs-perl - security update

Bulletin has no description...

perl-JSON-XS-4.40.0-1.1 on GA media (moderate)

perl-JSON-XS-4.40.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15535-1 Rating: moderate Cross-References: CVE-2025-40928 CVSS scores: CVE-2025-40928 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-40928 SUSE : 9.3...

OPENSUSE-SU-2025:15534-1 perl-Cpanel-JSON-XS-4.400.0-1.1 on GA media

These are all security issues fixed in the perl-Cpanel-JSON-XS-4.400.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-40928

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

SUSE CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

ALPINE-CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

AZL-67086 CVE-2025-40929 affecting package perl-Cpanel-JSON-XS 4.27-2

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

DEBIAN-CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

UBUNTU-CVE-2025-40928

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40929 Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40928

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

CVE-2025-40928

CVE-2025-40928 affects the Perl JSON::XS/LibJSON::XS module. The vulnerability is an integer buffer overflow when parsing crafted JSON, leading to a segfault and potential denial-of-service. Affected software includes JSON::XS up to version 4.04 for Perl (and perl-JSON-XS

Linux Distros Unpatched Vulnerability : CVE-2025-40906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities. Those include CVE-2017-14227, CVE-2018-16790,...

Malicious code in xs-js-ipld-dag-cbor (npm)

The package xs-js-ipld-dag-cbor was found to contain malicious code...

MAL-2025-39993 Malicious code in xs-js-ipld-dag-cbor (npm)

The package xs-js-ipld-dag-cbor was found to contain malicious code...

The vulnerability of the Perl JSON data structure transformation module Cpanel::JSON::XS, related to reading beyond the buffer boundary in memory, allows an attacker to obtain confidential information or cause service failures.

The vulnerability of the Perl Data Structure Transformation Module in JSON Cpanel::JSON::XS relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause service failures...