[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1108861: unblock: cjson/1.7.18-3.1



Package: release.debian.org
Severity: normal
X-Debbugs-Cc: cjson@packages.debian.org, Adrian Bunk <bunk@debian.org>, team@security.debian.org, Maytham Alsudany <maytha8thedev@gmail.com>, carnil@debian.org
Control: affects -1 + src:cjson
User: release.debian.org@packages.debian.org
Usertags: unblock

Hi,

Please unblock package cjson

[ Reason ]
cjson 1.7.18-3 was prone to CVE-2023-26819, fixed by Adrian in the
1.7.18-3.1 NMU, cf. #1103687.

[ Impact ]
cjson in trixie remains vulnerable so far to CVE-2023-26819. There is
as well a pending cjson bookworm-pu update covering as well this CVE.

[ Tests ]
I have done none. There is a test covering the change.

[ Risks ]
Probably low, upstream change applied.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

unblock cjson/1.7.18-3.1

Regards,
Salvatore


Reply to: