Change log for jansson package in Ubuntu

jansson (2.14-2build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 01:26:06 +0000

Available diffs

• diff from 2.14-2 (in Debian) to 2.14-2build2 (582 bytes)
• diff from 2.14-2build1 to 2.14-2build2 (516 bytes)

jansson (2.14-2build1) noble; urgency=medium

  * No-change rebuild.

 -- Matthias Klose <email address hidden>  Fri, 29 Mar 2024 17:16:31 +0100

Available diffs

• diff from 2.14-2 (in Debian) to 2.14-2build1 (307 bytes)

jansson (2.14-2) unstable; urgency=medium

  * Team upload (salsa.debian.org/debian namespace)
  * debian/patches/0677666f65b988b2dd44d02966a08fea490d5883.patch:
    - cherry-pick upstream test fix for new symbols

 -- Gianfranco Costamagna <email address hidden>  Wed, 13 Apr 2022 21:32:35 +0200

Available diffs

• diff from 2.13.1-1.1build3 (in ~ci-train-ppa-service/ubuntu/4813-deletedppa) to 2.14-2 (417.7 KiB)
• diff from 2.14-1 to 2.14-2 (888 bytes)

jansson (2.14-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit (from ./configure), Repository, Repository-Browse.
  * Drop unnecessary dependency on dh-autoreconf.
  * Update standards version to 4.6.0, no changes needed.

  [ Florian Ernst ]
  * Update debian/watch file to detect new release (Closes: #1008003)

  [ Gianfranco Costamagna ]
  * Team upload (salsa.debian.org/debian namespace)
  * New upstream version 2.14 (Closes: #996890, Closes: #966398)
  * Drop sphinx patch, now upstream
  * Add new symbols versioning from upstream -Wl,--default-symver
  * Add new symbols from new release
  * Bump symbols to 2.14
  * Add R^3: no

 -- Gianfranco Costamagna <email address hidden>  Wed, 13 Apr 2022 08:47:00 +0200

Available diffs

• diff from 2.13.1-1.1build3 (in ~ci-train-ppa-service/ubuntu/4813-deletedppa) to 2.14-1 (417.2 KiB)

jansson (2.13.1-1.1build3) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <email address hidden>  Thu, 24 Mar 2022 13:01:30 +0100

Available diffs

• diff from 2.13.1-1.1build2 (in Ubuntu) to 2.13.1-1.1build3 (352 bytes)

jansson (2.13.1-1.1build2) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:13:20 +0200

Available diffs

• diff from 2.13.1-1.1build1 to 2.13.1-1.1build2 (338 bytes)

jansson (2.13.1-1.1build1) hirsute; urgency=medium

  * No change rebuild with fixed ownership.

 -- Dimitri John Ledkov <email address hidden>  Tue, 16 Feb 2021 15:16:23 +0000

Available diffs

• diff from 2.13.1-1ubuntu1 to 2.13.1-1.1build1 (715 bytes)
• diff from 2.13.1-1.1 (in Debian) to 2.13.1-1.1build1 (533 bytes)

jansson (2.13.1-1.1) unstable; urgency=medium

  * Non-maintainer upload

  [ Sebastien Bacher ]
  * debian/patches/git_new_sphinx.patch:
    - backport an upstream change to fix the build with sphinx3
      (Closes: #963640)

 -- Sebastian Ramacher <email address hidden>  Thu, 04 Feb 2021 22:47:01 +0100

jansson (2.13.1-1ubuntu1) groovy; urgency=medium

  * debian/patches/git_new_sphinx.patch:
    - backport an upstream change to fix the build with sphinx3
      (Closes: #963640)

 -- Sebastien Bacher <email address hidden>  Tue, 29 Sep 2020 15:16:23 +0200

Available diffs

• diff from 2.13.1-1 (in Debian) to 2.13.1-1ubuntu1 (1.3 KiB)

jansson (2.13.1-1) unstable; urgency=medium

  * New upstream release (Closes: #963842)
  * Bump debhelper compat level to 13
  * Bump Standards-Version to 4.5.0 (no changes needed)
  * Update symbols file
  * Fix symbols-file-missing-build-depends-package-field
  * Mark libjansson.la as not installed
  * Use https:// URL in watch file

 -- Alessandro Ghedini <email address hidden>  Sun, 28 Jun 2020 13:46:50 +0100

Available diffs

• diff from 2.12-1build1 (in Ubuntu) to 2.13.1-1 (142.0 KiB)

jansson (2.12-1build1) disco; urgency=medium

  * No change rebuild to see if fPIC is picked up

 -- Gianfranco Costamagna <email address hidden>  Sat, 12 Jan 2019 12:18:17 +0100

Available diffs

• diff from 2.12-1 (in Debian) to 2.12-1build1 (321 bytes)

jansson (2.12-1) unstable; urgency=medium

  * New upstream release
  * Bump Standards-Version to 4.2.1 (no change needed)
  * Mark libjansson-doc Multi-Arch: foreign

 -- Alessandro Ghedini <email address hidden>  Sat, 15 Dec 2018 12:04:59 +0000

Available diffs

• diff from 2.11-1 to 2.12-1 (52.8 KiB)

jansson (2.5-2ubuntu0.2) trusty-security; urgency=medium

  * REGRESSION UPDATE: The backport of CVE-2013-6401 brought a
    regression.
    - debian/patches/Fix-regression-in-CVE-2013-6401-backport.patch: Fix
      in src/hashtable.c and test/suites/api/test_objec.t

 -- Eduardo Barretto <email address hidden>  Thu, 02 Aug 2018 12:05:04 -0300

Available diffs

• diff from 2.5-2ubuntu0.1 to 2.5-2ubuntu0.2 (1.2 KiB)

jansson (2.7-3ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Stack exhaustion parsing a JSON file
    - debian/patches/CVE-2016-4425.patch: Fix in src/load.c and
      src/jansson_config.h.in
    - CVE-2016-4425

 -- Eduardo Barretto <email address hidden>  Wed, 01 Aug 2018 09:32:47 -0300

Available diffs

• diff from 2.7-3 (in Debian) to 2.7-3ubuntu0.1 (2.5 KiB)

jansson (2.5-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Hash collision issue
    - debian/patches/CVE-2013-6401.patch: Fix hash function so that
      it is not susceptible to predictable hash collisions
    - CVE-2013-6401

  * SECURITY UPDATE: Stack exhaustion parsing a JSON file
    - debian/patches/CVE-2016-4425.patch: Fix in src/load.c and
      src/jansson_config.h.in
    - CVE-2016-4425

 -- Eduardo Barretto <email address hidden>  Wed, 01 Aug 2018 09:32:10 -0300

Available diffs

• diff from 2.5-2 (in Debian) to 2.5-2ubuntu0.1 (13.5 KiB)

jansson (2.11-1) unstable; urgency=medium

  * New upstream release
  * Fix useless-autoreconf-build-depends dh-autoreconf
  * Switch to Python3 version of Sphinx
  * Update symbols file
  * Use SOURCE_DATE_EPOCH instead of dpkg-parsechangelog output
  * Update doc-base paths

 -- Alessandro Ghedini <email address hidden>  Sun, 11 Feb 2018 19:19:55 +0000

Available diffs

• diff from 2.10-1 to 2.11-1 (47.0 KiB)

jansson (2.10-1) unstable; urgency=medium

  * New upstream release
  * Update Standards-Version to 4.0.0 (no changes needed)
  * Update symbols file

 -- Alessandro Ghedini <email address hidden>  Mon, 24 Jul 2017 00:17:43 +0100

Available diffs

• diff from 2.9-1 to 2.10-1 (14.4 KiB)

jansson (2.9-1) unstable; urgency=medium

  * New upstream release
  * Drop 01_CVE-2016-4425.patch (merged upstream)
  * Update symbols file

 -- Alessandro Ghedini <email address hidden>  Sat, 19 Nov 2016 16:31:48 +0000

Available diffs

• diff from 2.7-5 to 2.9-1 (234.1 KiB)

jansson (2.7-5) unstable; urgency=high

  * Bump Standards-Version to 3.9.8 (no changes needed)
  * Fix stack exhaustion when parsing JSON as per CVE-2016-4425
    (Closes: #823238)

 -- Alessandro Ghedini <email address hidden>  Sat, 14 May 2016 16:45:26 +0100

Available diffs

• diff from 2.7-4 to 2.7-5 (2.4 KiB)

jansson (2.7-4) unstable; urgency=medium

  * Make build reproducible (Closes: #789748)
    Thanks to Juan Picca for the patch
  * Drop -dbg package
  * Update Vcs links
  * Improve cross Build-Depends satisfiability (Closes: #807848)
    Thanks to Helmut Grohne for the patch

 -- Alessandro Ghedini <email address hidden>  Sat, 23 Apr 2016 13:53:34 +0100

Available diffs

• diff from 2.7-3 to 2.7-4 (1.2 KiB)

jansson (2.7-3) unstable; urgency=medium

  * Always build the documentation (Closes: #789675)

 -- Alessandro Ghedini <email address hidden>  Tue, 23 Jun 2015 13:11:09 +0200

Available diffs

• diff from 2.7-1ubuntu1 (in Ubuntu) to 2.7-3 (1.2 KiB)

jansson (2.7-1ubuntu1) vivid; urgency=medium

  * Don't pull in libjs-backbone (LP: #1392025)
    - debian/control: don't have libjansson-doc Depends on libjs-backbone.
    - debian/libjansson-doc.links: don't add links to backbone.js.
 -- Mathieu Trudel-Lapierre <email address hidden>   Wed, 12 Nov 2014 14:50:28 -0500

Available diffs

• diff from 2.7-1 (in Debian) to 2.7-1ubuntu1 (765 bytes)

jansson (2.7-1) unstable; urgency=medium


  * New upstream release
    - Support ``\u0000`` escapes in the decoder (Closes: #739207)
  * Update symbols file
  * Update upstream copyright

 -- Alessandro Ghedini <email address hidden>  Thu, 02 Oct 2014 16:05:46 +0200

Available diffs

• diff from 2.6-1 to 2.7-1 (97.3 KiB)

jansson (2.6-1) unstable; urgency=high


  * New upstream release
    - Fix hash function so that it is not susceptible to predictable hash
      collisions as per CVE-2013-6401 (Closes: #738647)
    - Set urgency=high accordingly
  * Update symbols file

 -- Alessandro Ghedini <email address hidden>  Wed, 12 Feb 2014 14:27:38 +0100

Available diffs

• diff from 2.5-2 to 2.6-1 (28.1 KiB)

jansson (2.5-2) unstable; urgency=medium


  * Fix vcs-field-not-canonical
  * Bump Standards-Version to 3.9.5 (no changes needed)
  * Use dh-autoreconf instead of autotools-dev to fix FTBFS on ppc64el.
    Thanks to Logan Rosen for the patch (Closes: #732822)

 -- Alessandro Ghedini <email address hidden>  Sun, 22 Dec 2013 15:31:36 +0100

Available diffs

• diff from 2.5-1ubuntu1 (in Ubuntu) to 2.5-2 (799 bytes)

jansson (2.5-1ubuntu1) trusty; urgency=medium

  * Use dh-autoreconf instead of autotools-dev to try to fix FTBFS on ppc64el.
 -- Logan Rosen <email address hidden>   Sun, 22 Dec 2013 00:29:09 -0500

Available diffs

• diff from 2.5-1 (in Debian) to 2.5-1ubuntu1 (657 bytes)

jansson (2.5-1) unstable; urgency=low


  * New upstream release
  * Bump Standards-Version to 3.9.4
  * Update upstream copyright years

 -- Alessandro Ghedini <email address hidden>  Fri, 20 Sep 2013 10:44:52 +0200

Available diffs

• diff from 2.4-1 to 2.5-1 (32.3 KiB)

jansson (2.4-1) unstable; urgency=low


  * New upstream release
    - Fix FTBFS on ppc64. Thanks to Aurelien Jarno (Closes: #684468)
  * Update *.symbols file

 -- Alessandro Ghedini <email address hidden>  Sun, 23 Sep 2012 14:00:33 +0200

Available diffs

• diff from 2.3.1-2 to 2.4-1 (15.7 KiB)

jansson (2.3.1-2) unstable; urgency=low


  * Make -dev package Multi-Arch: same too
  * Move python-sphinx to build-depends-indep

 -- Alessandro Ghedini <email address hidden>  Sun, 03 Jun 2012 17:05:29 +0200

Available diffs

• diff from 2.3.1-1 to 2.3.1-2 (745 bytes)

jansson (2.3.1-1) unstable; urgency=low


  * New upstream release
  * Update debian/copyright format as in Debian Policy 3.9.3
  * Bump Standards-Version to 3.9.3
  * Bump debhelper compat level to 9
  * Email change: Alessandro Ghedini -> <email address hidden>
  * Add Multi-Arch headers
  * Use multi-arch aware paths in *.install files
  * Update upstream copyright years

 -- Alessandro Ghedini <email address hidden>  Sat, 21 Apr 2012 14:30:56 +0200

Available diffs

• diff from 2.3-2 to 2.3.1-1 (39.3 KiB)

jansson (2.3-2) unstable; urgency=low


  * Do not use dh_sphinxdoc anymore (should fix the various FTBFS)

 -- Alessandro Ghedini <email address hidden>  Mon, 13 Feb 2012 10:21:19 +0100

Available diffs

• diff from 2.2.1-1 (in Ubuntu) to 2.3-2 (145.5 KiB)

jansson (2.2.1-1) unstable; urgency=low

  * New upstream release
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  21 Oct 2011 09:25:45 +0000

Available diffs

• diff from 2.2-1 to 2.2.1-1 (12.1 KiB)

jansson (2.2-1) unstable; urgency=low

  * New upstream release
  * Do not use upstream tarball from GitHub anymore, 
    update watch file accordingly
  * Replace dh-autoreconf with autotools-dev
  * Bump debhelper compat level to 8
  * Update *.symbols file
  * Make -doc package Architecture: all
  * Do not bundle underscore.js library included by sphinx
  * Don't depend on libjansson4 from -doc package 
    (fixes not-binnmuable-all-depends-any lintian error)
  * Move libjansson4 package up in debian/control
  * Remove dh_install override from debian/rules (not needed)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  17 Oct 2011 11:00:00 +0000

Available diffs

• diff from 2.1-1 to 2.2-1 (290.3 KiB)

jansson (2.1-1) unstable; urgency=low

  * New upstream release
    - Fix set-but-not-used warning/error in a test (Closes: #625359)
  * Update libjansson4 *.symbols file
  * Bump Standards-Version to 3.9.2 (no changes needed)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  16 Jun 2011 11:14:43 +0000

Available diffs

• diff from 2.0.1-1 to 2.1-1 (6.8 KiB)

jansson (2.0.1-1) unstable; urgency=low

  * Initial release (Closes: #561051)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  04 May 2011 09:32:00 +0000