FEDORA-2022-569b6b45e2 — security update for python-ujson

stable

python-ujson-5.2.0-1.fc36

FEDORA-2022-569b6b45e2 created by music 2 years ago for Fedora 36

Update to 5.2.0 (close #2072241, fix CVE-2021-45958)

Added

Support parsing NaN, Infinity and -Infinity
Support dynamically linking against system double-conversion library
Add env var to control stripping debug info
Add JSONDecodeError

Fixed

Fix buffer overflows (CVE-2021-45958)
Upgrade Black to fix Click
simplify exception handling on integer overflow
Remove dead code that used to handle the separate int type in Python 2
Fix exceptions on encoding list or dict elements and non-overflow errors on int handling getting silenced

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-569b6b45e2

This update has been submitted for testing by music.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

music edited this update.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

python-ujson-5.2.0-1.fc36

BZ#2072241 python-ujson-5.2.0 is available

python-ujson-5.2.0-1.fc36

Automated Test Results

ignored