Bug#960326: json-c: CVE-2020-12762

[Armand Grillet <agrillet@d2iq.com>]

Hi,

A fix has landed in json-c-0.12 (which is the upstream used for json-c in Debian Buster): https://github.com/json-c/json-c/commit/f2b7d0b5cbd0eccf4fb3c1851ec0864952be1057

I do not know how to get this fix in Debian's json-c repository https://salsa.debian.org/debian/json-c as there is a branch named debian/buster which contains changes made specifically for Debian and I am unaware of the review/release process of this package.

What should be the next steps?

Best regards,

Armand Grillet