diff --git a/SPECS/json-c.spec b/SPECS/json-c.spec index 1423523..71a52b8 100644 --- a/SPECS/json-c.spec +++ b/SPECS/json-c.spec @@ -16,7 +16,7 @@ Name: json-c Version: 0.13.1 -Release: 0.4%{?dist} +Release: 1%{?dist} Summary: JSON implementation in C License: MIT @@ -25,6 +25,9 @@ Source0: %{url}/archive/%{name}-%{version}-%{reldate}.tar.gz %if 0%{?bootstrap} Source1: %{url}/archive/%{name}-%{version_old}-%{reldate_old}.tar.gz %endif +# CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file +# rhbz#1835626 +Patch0: json-c-int-overflow.patch BuildRequires: libtool @@ -166,6 +169,10 @@ end %changelog +* Thu Apr 15 2021 Tomas Korbar - 0.13.1-1 +- Fix CVE-2020-12762 out-of-bounds write via a large JSON file +- Resolves: rhbz#1835626 + * Wed Feb 03 2021 Petr Menšík - 0.13.1-0.4 - Move json-c-devel to AppStream