Accepted cjson 1.7.10-1.1 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 May 2019 08:52:20 +0000
Source: cjson
Binary: libcjson-dev libcjson1 libcjson1-dbgsym
Architecture: source amd64
Version: 1.7.10-1.1
Distribution: unstable
Urgency: medium
Maintainer: Yanhao Mo <yanhaocs@gmail.com>
Changed-By: Gordon Ball <gordon@chronitis.net>
Description:
libcjson-dev - Ultralightweight JSON parser in ANSI C (development files)
libcjson1 - Ultralightweight JSON parser in ANSI C
Closes: 928726
Changes:
cjson (1.7.10-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Cherry pick upstream commit a43fa56a63920343d0ac8f8e73a6b0447867f459,
which contains fixes for CVEs (Closes: #928726)
+ CVE-2019-11834
+ CVE-2019-11835
Checksums-Sha1:
e318dff02d0c4c087e04b7d78d12e703a4f53657 1910 cjson_1.7.10-1.1.dsc
c0ff23a085e66de4eb04970d0859985db8c68916 5424 cjson_1.7.10-1.1.debian.tar.xz
1cc270b31b9e41845e657e6dfcb05060900a261c 6791 cjson_1.7.10-1.1_amd64.buildinfo
1c16c35727c2c876083ba2929a180b4f43ff367f 22156 libcjson-dev_1.7.10-1.1_amd64.deb
5e1b27bda1363c1ab8d1efb320602e91df2140ff 30576 libcjson1-dbgsym_1.7.10-1.1_amd64.deb
039383eb0827622458036ff3d08120fe9526141a 20552 libcjson1_1.7.10-1.1_amd64.deb
Checksums-Sha256:
b1817b30c0992441065d838d1e3c35ea2b6cca4c7b70a4f16511ab623d38ab2f 1910 cjson_1.7.10-1.1.dsc
81d5ca5e56d0e1427bb643d7334696c1a0621dc40ececde79dfd6676bf3aed06 5424 cjson_1.7.10-1.1.debian.tar.xz
7fbe2dfdfd6f82cd8664795f133686224c5d2ca0adf3caaddcf05e071939c582 6791 cjson_1.7.10-1.1_amd64.buildinfo
688837012daa563932fdb22ebe14917f40c67904c2f7eacc6f824a9f8330bca1 22156 libcjson-dev_1.7.10-1.1_amd64.deb
2f422dafb966d2d347a89d5746977c88bdce15b27336c81a790a4e22fb0721d9 30576 libcjson1-dbgsym_1.7.10-1.1_amd64.deb
d41ba630a26f1bd33eb4ed63e841d95ebfdf8182e9297f5f0d44e61becf05f5a 20552 libcjson1_1.7.10-1.1_amd64.deb
Files:
d1a19ba45aa9c1e6ffffc582bbb2113b 1910 libs optional cjson_1.7.10-1.1.dsc
4cabfba60e9bbec2dcae53895383b1e9 5424 libs optional cjson_1.7.10-1.1.debian.tar.xz
543c5170f0a9e1b16df994d1d5e68e82 6791 libs optional cjson_1.7.10-1.1_amd64.buildinfo
cd34a8e0ae8e0bebb2f57385588c3462 22156 libdevel optional libcjson-dev_1.7.10-1.1_amd64.deb
5246380ebd95acdb59f1972c696639cf 30576 debug optional libcjson1-dbgsym_1.7.10-1.1_amd64.deb
bd6332f2a5fb1c0592dcf1ae1bffb289 20552 libs optional libcjson1_1.7.10-1.1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=E8DZ
-----END PGP SIGNATURE-----
Reply to: