tocsin

Debian/jansson: unknown

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a c

Action: Upgrade jansson to 2.6-1 or later.

Affected

introducedfixedlast affected
02.6-1-

Fixed versions

2.6-1

Sources

published · modified · JSON