PT-2022-37571 · Mageia · Python-Ujson

Published 2022-06-09 · Updated 2022-06-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description.

Description The issue concerns handling unserialisable objects, which can lead to segmentation faults when errors occur. Additionally, there are problems with converting dict keys to strings and memory leaks when dumping non-string dict keys. The description also mentions fixing ref counting issues on repeated default function calls and removing a redundant wheel dependency from pyproject.toml.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2022-0222

Affected Products

Python-Ujson

References · 5

• https://advisories.mageia.org/MGASA-2022-0222.html · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0222 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/R3GHJVC47JEGKA6UDB2UE57K2NMY57RH · Vendor Advisory
• https://github.com/ultrajson/ultrajson/releases/tag/5.3.0 · Note
• https://bugs.mageia.org/show_bug.cgi?id=30502 · Note