Message ID | 20230929065647.1456926-1-peter@korsgaard.com |
---|---|
State | Accepted |
Headers | show |
Series | package/libfastjson: security bump to version 0.99.9.1 | expand |
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: > Fixes the equivalent of CVE-2020-12762, which was a json-c vulnerability: > https://github.com/advisories/GHSA-3797-gmjf-45gm > https://github.com/rsyslog/libfastjson/pull/166 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Committed, thanks.
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: >>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: >> Fixes the equivalent of CVE-2020-12762, which was a json-c vulnerability: >> https://github.com/advisories/GHSA-3797-gmjf-45gm >> https://github.com/rsyslog/libfastjson/pull/166 >> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> > Committed, thanks. Committed to 2023.02.x and 2023.08.x, thanks.
diff --git a/package/libfastjson/libfastjson.hash b/package/libfastjson/libfastjson.hash index 218a738b37..f220c608df 100644 --- a/package/libfastjson/libfastjson.hash +++ b/package/libfastjson/libfastjson.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 881f954633aa76931e4c756ece0bda6fd8a673c6e66955a3db3b2bb9d6bbff72 libfastjson-0.99.9.tar.gz +sha256 67cde7e85fa372036d7694f3b32cfc666705ab19367920f555af9d1c183edfef libfastjson-0.99.9.1.tar.gz sha256 b29370bbfa98816e1fca0901f18149d920736771bfd68b4ee0eb00c78b38d245 COPYING diff --git a/package/libfastjson/libfastjson.mk b/package/libfastjson/libfastjson.mk index 7ab978dc67..5ee33ba496 100644 --- a/package/libfastjson/libfastjson.mk +++ b/package/libfastjson/libfastjson.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBFASTJSON_VERSION = 0.99.9 +LIBFASTJSON_VERSION = 0.99.9.1 LIBFASTJSON_SITE = $(call github,rsyslog,libfastjson,v$(LIBFASTJSON_VERSION)) LIBFASTJSON_INSTALL_STAGING = YES LIBFASTJSON_CONF_ENV = ac_cv_prog_cc_c99='-std=gnu99'
Fixes the equivalent of CVE-2020-12762, which was a json-c vulnerability: https://github.com/advisories/GHSA-3797-gmjf-45gm https://github.com/rsyslog/libfastjson/pull/166 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> --- package/libfastjson/libfastjson.hash | 2 +- package/libfastjson/libfastjson.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)