ujson (1.33-1ubuntu0.1~esm2) xenial-security; urgency=medium

  * SECURITY UPDATE: improper syntax validation
    - debian/patches/CVE-2022-31116.patch: fix handling of
      surrogates on decoding.
    - CVE-2022-31116
  * SECURITY UPDATE: double free
    - debian/patches/CVE-2022-31117.patch: fix double free on string
      decoding if realloc fails.
    - CVE-2022-31117
  * debian/patches/CVE-2022-31116-tests-backport.patch: backport of
    tests from the patch to unittest. Fixed unittests in PY2. Disabled
    some tests incompatible with PY2. Converted the script to UTF-8
    and enabled unicode_literal. Fixed some broken tests.

 -- Allen Huang <allen.huang@canonical.com>  Thu, 11 Jan 2024 16:08:29 +0000

ujson (1.33-1build1) xenial; urgency=medium

  * No-change rebuild to drop python3.4 support.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 18 Jan 2016 19:40:09 +0000

ujson (1.33-1) unstable; urgency=low

  * Initial release (Closes: #790447)

 -- Sandro Tosi <morph@debian.org>  Mon, 29 Jun 2015 11:37:26 -0400
