-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Jun 2025 19:20:51 +0300 Source: cjson Binary: libcjson-dev libcjson1 libcjson1-dbgsym Architecture: amd64 Version: 1.7.15-1+deb12u3 Distribution: bookworm Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Adrian Bunk Description: libcjson-dev - Ultralightweight JSON parser in ANSI C (development files) libcjson1 - Ultralightweight JSON parser in ANSI C Closes: 1103687 Changes: cjson (1.7.15-1+deb12u3) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2023-26819: rejection of valid texts (Closes: #1103687) * CVE-2023-53154: heap buffer overflow Checksums-Sha1: 5bf5ca370126d4981226a188fa08bdb376e97eb8 7294 cjson_1.7.15-1+deb12u3_amd64-buildd.buildinfo 1252a38a95d34227cbccb4b4da43734e177cffec 26552 libcjson-dev_1.7.15-1+deb12u3_amd64.deb b9a16b8cc3ede102810ee8ac7a527bf1e0340e9b 32456 libcjson1-dbgsym_1.7.15-1+deb12u3_amd64.deb 2764b7803aad3616f59fc5bd1bc43d7391854ff8 23116 libcjson1_1.7.15-1+deb12u3_amd64.deb Checksums-Sha256: 0bad92b2148cd08fc393208f2fe998d4fb9b3b1dfd0d0cb53db9b81691c676fe 7294 cjson_1.7.15-1+deb12u3_amd64-buildd.buildinfo 0c38205cbc850f4ba8255c19f7574889d2949e3aa15f2f16ccdedccf83ee6694 26552 libcjson-dev_1.7.15-1+deb12u3_amd64.deb 91be53944ae6797579d85bb60953b41e4d253f2a9f7d3136b793b9a050894c91 32456 libcjson1-dbgsym_1.7.15-1+deb12u3_amd64.deb 984aed9d1c182adf573278a483820eec5de18e168fda50a55a14d3800a6d79a5 23116 libcjson1_1.7.15-1+deb12u3_amd64.deb Files: 358c56b45df423c536141eb08da3eb1d 7294 libs optional cjson_1.7.15-1+deb12u3_amd64-buildd.buildinfo 829e4c870a85836c3ed4441e575c2b6a 26552 libdevel optional libcjson-dev_1.7.15-1+deb12u3_amd64.deb def6a1653308aa0c19fb2f531364b2d3 32456 debug optional libcjson1-dbgsym_1.7.15-1+deb12u3_amd64.deb 97845414057981764f688477bade45a3 23116 libs optional libcjson1_1.7.15-1+deb12u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmhUDO8ACgkQEbCLukZn 24qf1xAAkyGcw8JL+UggGbHhWKsKeuBmdh7oUSAzZuVDjcNC8btL37G0PZkLcDXE X/t9w/3Ww4em1htAJEo0RgDg4tnmrdPX/lj5uLx4m+mcYZuthYv1o793gOzxv+xY u/jnQjjFVKjZT3ayG7If0fpB7uHIwJXwQ4m1Pmxe/XnJZfJgbHzVi0sNjv0jRuy1 DCRi0MyGO4IMMZNyqw5SS1nF5xcsxw6CkeOZcWc3GZ8IvjwkLmDojTuvXb9PpFKg V226+Y7yJASyryPF2menmJirON1WMHDDSDgwfwMe6AqsGrTsUkoGHu7/II12VIjb BKN3+L5A06rpIKtYyMCYEzCVr852LhqmzLI08etzEkYkPLcp3UVNvL9Pu7CHtaJ8 mVsSBkLMmaThvZy7Bvpg4JVZLM5/G/aV5MBNCSLJBbrrhRloDZF3aaqefQyXE9KD E92rDEP/d6/KeyqBjsx4+0NZWivLPKxykfmQf/ACvR8o+EXvMeU/dVTxiaYtItde 5jgXI6ux0/iO57Gc8Hyx3iP1ASA+leJzDbPuJlFPoBjziY8Ppgoa5ORH3pLncn1E KmX3JGugHSFYxVqL5UevXxL0r4RYreRBeFD9e++IcaHImB1w34G6VPVbtcTQ6ved 5ZJBVykOkPRTQQjE7jdCvdTiFuO11m2ALLyXPjErIVKxA/M9qPA= =btQE -----END PGP SIGNATURE-----