Monday, April 25, 2022

[SECURITY UPDATE] devel/jansson

Hi,
The patch below updates jansson to 2.14 and brings CVE-2020-36325 fix.
All consumers are building fine. Runtime test with seafile-client.
OK to commit?

Index: Makefile
===================================================================
RCS file: /cvs/ports/devel/jansson/Makefile,v
retrieving revision 1.18
diff -u -p -u -r1.18 Makefile
--- Makefile 11 Mar 2022 18:50:14 -0000 1.18
+++ Makefile 25 Apr 2022 15:18:06 -0000
@@ -1,8 +1,9 @@
COMMENT = library for manipulating JSON data

-DISTNAME = jansson-2.13.1
+V = 2.14
+DISTNAME = jansson-${V}

-SHARED_LIBS = jansson 4.1
+SHARED_LIBS = jansson 4.2

CATEGORIES = devel

@@ -13,7 +14,7 @@ MAINTAINER = Kirill Bychkov <kirby@open
# MIT
PERMIT_PACKAGE = Yes

-MASTER_SITES = https://digip.org/jansson/releases/
+MASTER_SITES = https://github.com/akheron/jansson/releases/download/v${V}/

SEPARATE_BUILD = Yes
CONFIGURE_STYLE = gnu
Index: distinfo
===================================================================
RCS file: /cvs/ports/devel/jansson/distinfo,v
retrieving revision 1.7
diff -u -p -u -r1.7 distinfo
--- distinfo 16 Jul 2021 15:00:18 -0000 1.7
+++ distinfo 25 Apr 2022 15:18:06 -0000
@@ -1,2 +1,2 @@
-SHA256 (jansson-2.13.1.tar.gz) = 9PN32hexAgGmDBEIYT547hXfaxIBaxFrbeQiCfR6R08=
-SIZE (jansson-2.13.1.tar.gz) = 531924
+SHA256 (jansson-2.14.tar.gz) = V5jQEOQc+NdrZiNs+y8lQ8jQghgdFrwwhatJU41LmSk=
+SIZE (jansson-2.14.tar.gz) = 535618

No comments:

Post a Comment