ujson (1.35-2ubuntu0.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2021-45958.patch: a rewrite of the buffer
      reservation calls from scratch and fixes a bug in the debug
      buffer check.
    - CVE-2021-45958
  * SECURITY UPDATE: improper syntax validation
    - debian/patches/CVE-2022-31116.patch: fix handling of
      surrogates on decoding.
    - CVE-2022-31116
  * SECURITY UPDATE: double free
    - debian/patches/CVE-2022-31117.patch: fix double free on string
      decoding if realloc fails.
    - CVE-2022-31117
  * debian/patches/CVE-2021-45958-2022-31116-tests-backport.patch:
    backport of tests from the patches to unittest. Fixed unittests
    in PY2. Disabled some tests incompatible with PY2.

 -- Allen Huang <allen.huang@canonical.com>  Wed, 10 Jan 2024 16:32:30 +0000

ujson (1.35-2) unstable; urgency=medium

  * debian/control
    - add 2to3 to b-d, now a separate package; Closes: #887448
    - bump Standards-Version to 4.1.3
    - remove prio: extra from -dbg packages
  * debian/copyright
    - extend packaging copyright years

 -- Sandro Tosi <morph@debian.org>  Tue, 23 Jan 2018 23:12:05 -0500

ujson (1.35-1) unstable; urgency=medium

  [ Sandro Tosi ]
  * New upstream release: Closes: #792610, #827209
  * debian/control
    - set Vcs-* fields
    - set team as uploaders
    - bump Standards-Version to 3.9.8 (no changes needed)
    - add six, pytz to b-d, needed by tests
  * debian/copyright
    - extend packaging copyright years
    - updated upstream copyright years
  * debian/patches/0002-run-test-more-verbosely.patch
    - run tests more verbosely

  [ Ondřej Nový ]
  * Fixed homepage (https)
  * Fixed VCS URL (https)

 -- Sandro Tosi <morph@debian.org>  Tue, 14 Jun 2016 20:24:42 +0100

ujson (1.33-1) unstable; urgency=low

  * Initial release (Closes: #790447)

 -- Sandro Tosi <morph@debian.org>  Mon, 29 Jun 2015 11:37:26 -0400
