Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade org.json:json to 20230618 #1158

Open
turingtestfail opened this issue Sep 23, 2023 · 3 comments
Open

Upgrade org.json:json to 20230618 #1158

turingtestfail opened this issue Sep 23, 2023 · 3 comments

Comments

@turingtestfail
Copy link
Contributor

No description provided.

@dnlkoch
Copy link

dnlkoch commented Oct 11, 2023

Thanks to #1159 this is already done.

Unfortunately this update hasn't yet found its way into the current release candidate 1.24-RC (and thus to any upstream project). Is there any plan to apply it to the RC?

@ahennr
Copy link

ahennr commented Oct 23, 2023

Since org.json:json in version 20230618 is affected by CVE-2023-5072 the upcoming version 20231013 (see #1181) should be included in the next RC / release, shouldn't it?

Could you please tell me when such a next release is planned including the lastest json library?

@aaime
Copy link
Member

aaime commented Oct 30, 2023

Merged and queued for backport. Yes, it will be in the next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@aaime @dnlkoch @ahennr @turingtestfail