[SECURITY] Fedora 36 Update: python-ujson-5.2.0-1.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-569b6b45e2
2022-05-07 04:08:14.315010
--------------------------------------------------------------------------------
Name : python-ujson
Product : Fedora 36
Version : 5.2.0
Release : 1.fc36
URL : https://github.com/ultrajson/ultrajson
Summary : Ultra fast JSON encoder and decoder written in pure C
Description :
UltraJSON is an ultra fast JSON encoder and decoder written in pure C with
bindings for Python.
--------------------------------------------------------------------------------
Update Information:
Update to 5.2.0 (close RHBZ#2072241, fix CVE-2021-45958) **Added** - Support
parsing NaN, Infinity and -Infinity - Support dynamically linking against system
double-conversion library - Add env var to control stripping debug info - Add
`JSONDecodeError` **Fixed** - Fix buffer overflows
([CVE-2021-45958](https://github.com/advisories/GHSA-fh56-85cw-5pq6)) - Upgrade
Black to fix Click - simplify exception handling on integer overflow - Remove
dead code that used to handle the separate int type in Python 2 - Fix exceptions
on encoding list or dict elements and non-overflow errors on int handling
getting silenced
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 8 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 5.2.0-1
- Update to 5.2.0 (close RHBZ#2072241)
- Migrate to pyproject-rpm-macros (���new Python guidelines���)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2072241 - python-ujson-5.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2072241
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-569b6b45e2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------