{"id":"openSUSE-SU-2023:0225-1","aliases":[],"status":"published","title":"Security update for perl-Cpanel-JSON-XS","description":"This update for perl-Cpanel-JSON-XS fixes the following issues:\n\nperl-Cpanel-JSON-XS was updated to 4.36\n\nsee /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes\n\n* 4.36 2023-03-02 (rurban)\n\n    - remove the SAVESTACK_POS noop. Merged from JSON-XS-3.02,\n      removed there with 4.0. requested to remove with\n      L\u003chttps://github.com/Perl/perl5/pull/20858\u003e\n\n* 4.35 2023-02-22 (rurban)\n\n    - fix utf8 object stringification (jixam PR #212)\n\n* 4.34 2023-02-21 (rurban)\n\n    - fix c89 compilation regression, for loop init on centos. GH #211\n\n* 4.33 2023-02-21 (rurban)\n\n    - fix a security issue, decoding hash keys without ending :\n      (GH #208)\n    - check all bare hash keys for utf8 (GH #209)\n    - improve overload warnings (Graham Knop PR #205)\n    - fix a croak leak (GH #206)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-08-17T10:02:27Z","modified":"2023-08-17T10:02:27Z","fixes":[{"ecosystem":"SUSE:Package Hub 15 SP5","package":"perl-Cpanel-JSON-XS","fixed_in":["4.36-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"perl-Cpanel-JSON-XS","fixed_in":["4.36-bp155.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"perl-Cpanel-JSON-XS","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.36-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"perl-Cpanel-JSON-XS","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.36-bp155.2.3.1"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JGMKILPALPRKZKTSIFCNX34CXF3LRPOS/","tags":["advisory"]}],"sources":{"osv":[{"id":"openSUSE-SU-2023:0225-1","title":"Security update for perl-Cpanel-JSON-XS","description":"This update for perl-Cpanel-JSON-XS fixes the following issues:\n\nperl-Cpanel-JSON-XS was updated to 4.36\n\nsee /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes\n\n* 4.36 2023-03-02 (rurban)\n\n    - remove the SAVESTACK_POS noop. Merged from JSON-XS-3.02,\n      removed there with 4.0. requested to remove with\n      L\u003chttps://github.com/Perl/perl5/pull/20858\u003e\n\n* 4.35 2023-02-22 (rurban)\n\n    - fix utf8 object stringification (jixam PR #212)\n\n* 4.34 2023-02-21 (rurban)\n\n    - fix c89 compilation regression, for loop init on centos. GH #211\n\n* 4.33 2023-02-21 (rurban)\n\n    - fix a security issue, decoding hash keys without ending :\n      (GH #208)\n    - check all bare hash keys for utf8 (GH #209)\n    - improve overload warnings (Graham Knop PR #205)\n    - fix a croak leak (GH #206)\n","status":"published","published":"2023-08-17T10:02:27Z","modified":"2023-08-17T10:02:27Z","updated_at":"2026-11-02T16:58:32.653274Z"}]}}