Ubuntu
json-smart package

json-smart 2.2-2ubuntu1 source package in Ubuntu

Changelog

json-smart (2.2-2ubuntu1) lunar; urgency=medium

  * SECURITY UPDATE: DoS caused by unclosed quotes
    - debian/patches/0004-CVE-2021-31684-Fix-indexOf.patch:
      set right control variable for the indexOf function
      in json-smart/src/main/java/net/minidev/json/
      parser/JSONParserByteArray.java.
    - CVE-2021-31684
  * SECURITY UPDATE: DoS caused by uncontrolled nesting
    - debian/patches/0005-CVE-2023-1370-stack-overflow-due-to-
      excessive-recurs.patch: add limit for nested depth when processing
      "{" or "[" in
      json-smart/src/main/java/net/minidev/json/parser/JSONParserBase.java,
      json-smart/src/main/java/net/minidev/json/parser/ParseException.java,
      and json-smart/src/test/java/net/minidev/json/test/TestOverflow.java.
    - CVE-2023-1370

 -- David Fernandez Gonzalez <email address hidden>  Tue, 11 Apr 2023 13:33:16 +0200

Upload details

Uploaded by:
David Fernandez Gonzalez
Sponsored by:
Marc Deslauriers
Uploaded to:
Lunar
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Noble release universe misc
Mantic release universe misc
Lunar release universe misc

Builds

Lunar: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
json-smart_2.2.orig.tar.gz 57.7 KiB ce68b5b0e51babe4bee19a9b56ceb6737e099ca669acd5da500bf011e9ac7150
json-smart_2.2-2ubuntu1.debian.tar.xz 5.9 KiB cd98abfdf5fc816c635d00c649658ef3c827108565c3e9a7901c92224c2c6950
json-smart_2.2-2ubuntu1.dsc 2.1 KiB fea46bdbbb0e74126b9aec445fdfd4babcb345b10832e85d271794eb3f646216

View changes file

Binary packages built by this source

libjson-smart-java: JSON Small and Fast Parser

 Json-smart is a performance focused, JSON processor library. The API
 is similar to json-simple but the performance is improved (at least
 twice faster).