276 matches found
Astra Linux – vulnerability in yajl
In the yajl-ruby gem version 1.3.0 for Ruby, when a specially crafted JSON file is provided to Yajl::Parser.new.parse, the entire Ruby process crashes with a SIGABRT in the yajlstringdecode function within yajlencode.c. This causes the entire Ruby process to terminate, potentially leading to a...
CLSA-2026-1791550583 Fix CVE(s): CVE-2022-24795
SECURITY UPDATE: integer overflow in yajlbufensureavailable - debian/patches/CVE-2022-24795.patch: abort on buffer size overflow - CVE-2022-24795...
CLSA-2026-1791454791 yajl: Fix of CVE-2023-33460
CVE-2023-33460: fix memory leak in yajltreeparse function - rebuild with the vendor .el90 dist so the update outranks AlmaLinux 2.1.0-21.el90...
Rocky Linux 8.8 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (ciqsa-2026_0286)
The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260286 advisory. This advisory aggregates security fixes for the yajl SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-33460. Tenable has extracted the preceding description bloc...
Rocky Linux 8.6 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (ciqsa-2026_0281)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260281 advisory. This advisory aggregates security fixes for the yajl SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-33460. Tenable has extracted the preceding description bloc...
Rocky Linux 9.2 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel Multiple Vulnerabilities (ciqsa-2026_0506)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260506 advisory. This advisory aggregates security fixes for the yajl SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-33460, CVE-2022-24795. Tenable has extracted the...
Rocky Linux 9 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (crlsa-2022_8252)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228252 advisory. yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Tenable has extracted the preceding description block directly...
AlmaLinux 9.2 [TuxCare] Security Update: yajl / yajl-devel (ALMALINUX9.2:CLSA-2025:1757962664)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757962664 advisory. - There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
Rocky Linux 9 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (crlsa-2023_6551)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236551 advisory. yajl: Memory leak in yajltreeparse function CVE-2023-33460 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...
Rocky Linux 8.6 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (ciqsa-2026_0880)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260880 advisory. This advisory aggregates security fixes for the yajl SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-24795. Tenable has extracted the preceding description bloc...
Rocky Linux 8 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (crlsa-2023_7057)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20237057 advisory. yajl: Memory leak in yajltreeparse function CVE-2023-33460 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...
Rocky Linux 8 [CIQ] Security Update: yajl / yajl-debuginfo / yajl-debugsource / yajl-devel (crlsa-2022_7524)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227524 advisory. yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Tenable has extracted the preceding description block directly...
ROOT-OS-ALPINE-318-CVE-2023-33460 CVE-2023-33460 in yajl - Patched by Root
Root has patched CVE-2023-33460 in the yajl package for Root:Alpine:3.18. Multiple fixed versions available...
Astra Linux – Vulnerability in yajl
There is a memory leak in yajl 2.1.0 when using the yajltreeparse function. This can lead to out-of-memory issues on the server and cause crashes...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-yajl-ruby (UTSA-2026-093638)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093638 advisory. yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to...
Photon OS 5.0: Yajl PHSA-2025-5.0-92-0541
An update of the yajl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0541. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Yajl PHSA-2023-5.0-91-0096
An update of the yajl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Yajl PHSA-2025-5.0-91-0541
An update of the yajl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0541. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
JLSEC-2026-19 There's a memory leak in yajl 2.1.0 with use of `yajl_tree_parse` function
There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...
