json-c (0.11-4ubuntu2.6) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c, test4.c
      test4.expected, also adds the  fix for the INT_MAX regression caused in update
      0.11-4ubuntu2.1.
    - CVE-2020-12762

 -- Leonidas S. Barbosa <leo.barbosa@canonical.com>  Mon, 25 May 2020 11:00:53 -0300

json-c (0.11-4ubuntu2.5) xenial-security; urgency=medium

  * Don't call telinit from the postinst when running on upstart systems
    if upgrading from 0.11-4ubuntu2.1.

 -- Chris Coulson <chris.coulson@canonical.com>  Fri, 15 May 2020 14:51:30 +0100

json-c (0.11-4ubuntu2.2) xenial-security; urgency=medium

  * Revert the security fixes and rebuild the old version (LP: #1878723)

 -- Chris Coulson <chris.coulson@canonical.com>  Fri, 15 May 2020 12:11:57 +0100

json-c (0.11-4ubuntu2.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflows
    - debian/patches/CVE-2020-12762-*.patch: fix a series of
      integer overflows adding checks in linkhash.c, printbuf.c.
    - CVE-2020-12762

 -- Leonidas S. Barbosa <leo.barbosa@canonical.com>  Tue, 12 May 2020 10:30:28 -0300

json-c (0.11-4ubuntu2) vivid; urgency=medium

  * No change rebuild to get debug symbols on all architectures.

 -- Brian Murray <brian@ubuntu.com>  Mon, 12 Jan 2015 08:18:41 -0800

json-c (0.11-4ubuntu1) utopic; urgency=medium

  * SECURITY UPDATE: denial of service via hash collision (LP: #1311397)
    - debian/patches/0001-Patch-to-address-the-following-issues.patch:
    Upstream patch to enable hash randomization.
    - CVE-2013-6371
  * SECURITY UPDATE: denial of service via buffer overflow (LP: #1311397)
    - debian/patches/0001-Patch-to-address-the-following-issues.patch:
    Upstream patch to guard against negative and maximum buffer sizes.
    - CVE-2013-6370

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 23 Apr 2014 01:12:44 +0100

json-c (0.11-4) unstable; urgency=low

  * Add upstream patch to fix two security vulnerabilities (Closes: #744008)
    + [CVE-2013-6371]: hash collision denial of service
    + [CVE-2013-6370]: buffer overflow if size_t is larger than int

 -- Ondřej Surý <ondrej@debian.org>  Thu, 17 Apr 2014 12:02:59 +0200

json-c (0.11-3ubuntu1) trusty; urgency=low

  * Resynchronise with Debian.  Remaining changes:
    - On upgrade, restart Upstart (to pick up new package version) if the
      running instance supports it.

 -- Colin Watson <cjwatson@ubuntu.com>  Mon, 21 Oct 2013 13:56:14 +0100

json-c (0.11-3) unstable; urgency=low

  * Repository is not at anonscam.debian.org :)
  * Merge git changes from 0.11 and not-yet-merged pull request #94 needed
    for new php5-json

 -- Ondřej Surý <ondrej@debian.org>  Tue, 27 Aug 2013 12:37:59 +0200

json-c (0.11-2ubuntu1) saucy; urgency=low

  * Resynchronise with Debian.  Remaining changes:
    - Use dh-autoreconf to update config.guess/config.sub.
    - On upgrade, restart Upstart (to pick up new package version) if the
      running instance supports it.

 -- Colin Watson <cjwatson@ubuntu.com>  Tue, 16 Jul 2013 09:54:14 +0100

json-c (0.11-2) unstable; urgency=low

  * Fix compat symlinks in libjson0 and libjson0-dev

 -- Ondřej Surý <ondrej@debian.org>  Thu, 06 Jun 2013 20:05:57 +0200

json-c (0.11-1) unstable; urgency=low

  * Imported Upstream version 0.11
  * Transition from libjson to libjson-c reflecting upstream library name
    change
  * Add very thin symlink-based compatibility layer from libjson.so.0 to
    libjson-c.so.2
  * Remove debian/patches/fix-format-string-in-test.patch; merged upstream
  * Move documentation to SONAME agnostic package libjson-c-doc
  * Rename dbg symbols package to libjson-c2-dbg
  * Update watch file (Closes: #693518)
  * Update homepage location (Closes: #704918)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 13 May 2013 10:29:21 +0200

json-c (0.10-1.2ubuntu2) raring; urgency=low

  * debian/postinst: Force an upgrade to restart Upstart (to pick up
    new package version) if the running instance supports it.

 -- James Hunt <james.hunt@ubuntu.com>  Wed, 06 Feb 2013 16:26:16 +0000

json-c (0.10-1.2ubuntu1) raring; urgency=low

  * Add autoreconf to update config.sub,guess for aarch64 (LP: #1102043)

 -- Wookey <wookey@wookware.org>  Sun, 20 Jan 2013 04:21:12 +0000

json-c (0.10-1.2) unstable; urgency=medium

  * Medium-urgency upload for RC bugfix.
  * Non-maintainer upload, with approval of the maintainer.
  * Install libjson to /lib instead of /usr/lib, since upstart 1.6 needs it.
    Closes: #695566.

 -- Steve Langasek <vorlon@debian.org>  Fri, 14 Dec 2012 16:28:07 -0800

json-c (0.10-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Include the missing json_object_iterator.h header in
    libjson0-dev. (Closes: #685714)

 -- Gergely Nagy <algernon@madhouse-project.org>  Mon, 27 Aug 2012 12:56:32 +0200

json-c (0.10-1) unstable; urgency=low

  * New upstream release (Closes: #684058)
  * Change watch file to target on github json-c repository.
  * Add patch fixing compilation warning in tests/test_printbuf.c.
  * Update to standards-version 3.9.3.0.
  * Update copyright information.

 -- fabien boucher <fabien.dot.boucher@gmail.com>  Fri, 17 Aug 2012 16:40:10 +0000

json-c (0.9-1.1) unstable; urgency=low

  * Non-maintainer upload
  * Build for multiarch, closes: #637621
   (Patch from Steve Langasek)

 -- Riku Voipio <riku.voipio@linaro.org>  Fri, 18 May 2012 17:21:25 +0300

json-c (0.9-1) unstable; urgency=low

  * Initial release (Closes: #557788)

 -- fabien boucher <fabien.dot.boucher@gmail.com>  Wed, 11 Nov 2009 16:34:13 +0100
