From mboxrd@z Thu Jan  1 00:00:00 1970
Delivery-date: Wed, 30 Mar 2022 19:06:01 +0200
Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33])
	by lore.white.stw.pengutronix.de with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <ptxdist-bounces+lore=lore.pengutronix.de@pengutronix.de>)
	id 1nZble-00BZLn-12
	for lore@lore.pengutronix.de; Wed, 30 Mar 2022 19:06:01 +0200
Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de)
	by metis.ext.pengutronix.de with esmtp (Exim 4.92)
	(envelope-from <ptxdist-bounces@pengutronix.de>)
	id 1nZblg-0003dH-Vt; Wed, 30 Mar 2022 19:06:00 +0200
Received: from mail.thorsis.com ([92.198.35.195])
 by metis.ext.pengutronix.de with esmtp (Exim 4.92)
 (envelope-from <ada@thorsis.com>) id 1nZblS-0003cW-Ay
 for ptxdist@pengutronix.de; Wed, 30 Mar 2022 19:05:49 +0200
Date: Wed, 30 Mar 2022 19:04:25 +0200
From: Alexander Dahl <ada@thorsis.com>
To: Linnea Gunnarsson <linnea.gunnarsson@t2data.com>
Message-ID: <YkSNmfSZG8QIVE5f@ada-deb-carambola.ifak-system.com>
Mail-Followup-To: Linnea Gunnarsson <linnea.gunnarsson@t2data.com>,
 ptxdist@pengutronix.de
References: <20220330124036.2334533-1-linnea.gunnarsson@t2data.com>
Content-Disposition: inline
In-Reply-To: <20220330124036.2334533-1-linnea.gunnarsson@t2data.com>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 metis.ext.pengutronix.de
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=4.0 tests=AWL,BAYES_00,SPF_HELO_NONE,
 SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no
 version=3.4.2
Subject: Re: [ptxdist] [PATCH] json-c: version bump 0.14 -> 0.15
X-BeenThere: ptxdist@pengutronix.de
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Cc: ptxdist@pengutronix.de
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de
X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false

Hello,

Am Wed, Mar 30, 2022 at 02:40:36PM +0200 schrieb Linnea Gunnarsson:
> A couple of different changes, some new features
> and some removed ones. Nothing big.

According to my notes json-c up to 0.14 is affected by CVE-2020-12762:

https://security-tracker.debian.org/tracker/CVE-2020-12762

> Changelog can be found here:
> https://github.com/json-c/json-c/blob/master/ChangeLog

Those changes can be found in the section "Other changes" in that
changelog.

Greets
Alex

> Signed-off-by: Linnea Gunnarsson <linnea.gunnarsson@t2data.com>
> ---
>  rules/json-c.make | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/rules/json-c.make b/rules/json-c.make
> index f2a990bf4..8d0b2a39a 100644
> --- a/rules/json-c.make
> +++ b/rules/json-c.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_JSON_C) += json-c
>  #
>  # Paths and names
>  #
> -JSON_C_VERSION		:= 0.14
> -JSON_C_MD5		:= 72cbb065b43376d825cd521d115ae1f6
> +JSON_C_VERSION		:= 0.15
> +JSON_C_MD5		:= 55f395745ee1cb3a4a39b41636087501
>  JSON_C			:= json-c-$(JSON_C_VERSION)
>  JSON_C_SUFFIX		:= tar.gz
>  JSON_C_URL		:= https://s3.amazonaws.com/json-c_releases/releases/$(JSON_C).$(JSON_C_SUFFIX)
> -- 
> 2.32.0
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de