Subject: CVS commit: pkgsrc/textproc/py-ujson
From: Adam Ciarcinski
Date: 2022-07-02 09:57:30
Message id: 20220702075730.16F97FB1A@cvs.NetBSD.org

Log Message:
py-ujson: updated to 5.4.0

5.4.0

Added

Add support for arbitrary size integers

Fixed

CVE-2022-31116:
Replace wchar_t string decoding implementation with a uint32_t-based one
Fix handling of surrogates on decoding
CVE-2022-31117: Potential double free of buffer during string decoding \ 
@JustAnotherArchivist
Fix memory leak on encoding errors when the buffer was resized
Integer parsing: always detect overflows
Fix handling of surrogates on encoding

Files:
RevisionActionfile
1.15modifypkgsrc/textproc/py-ujson/Makefile
1.15modifypkgsrc/textproc/py-ujson/distinfo