Hi, The patch below updates jansson to 2.14 and brings CVE-2020-36325 fix. All consumers are building fine. Runtime test with seafile-client. OK to commit?
Index: Makefile =================================================================== RCS file: /cvs/ports/devel/jansson/Makefile,v retrieving revision 1.18 diff -u -p -u -r1.18 Makefile --- Makefile 11 Mar 2022 18:50:14 -0000 1.18 +++ Makefile 25 Apr 2022 15:18:06 -0000 @@ -1,8 +1,9 @@ COMMENT = library for manipulating JSON data -DISTNAME = jansson-2.13.1 +V = 2.14 +DISTNAME = jansson-${V} -SHARED_LIBS = jansson 4.1 +SHARED_LIBS = jansson 4.2 CATEGORIES = devel @@ -13,7 +14,7 @@ MAINTAINER = Kirill Bychkov <kirby@open # MIT PERMIT_PACKAGE = Yes -MASTER_SITES = https://digip.org/jansson/releases/ +MASTER_SITES = https://github.com/akheron/jansson/releases/download/v${V}/ SEPARATE_BUILD = Yes CONFIGURE_STYLE = gnu Index: distinfo =================================================================== RCS file: /cvs/ports/devel/jansson/distinfo,v retrieving revision 1.7 diff -u -p -u -r1.7 distinfo --- distinfo 16 Jul 2021 15:00:18 -0000 1.7 +++ distinfo 25 Apr 2022 15:18:06 -0000 @@ -1,2 +1,2 @@ -SHA256 (jansson-2.13.1.tar.gz) = 9PN32hexAgGmDBEIYT547hXfaxIBaxFrbeQiCfR6R08= -SIZE (jansson-2.13.1.tar.gz) = 531924 +SHA256 (jansson-2.14.tar.gz) = V5jQEOQc+NdrZiNs+y8lQ8jQghgdFrwwhatJU41LmSk= +SIZE (jansson-2.14.tar.gz) = 535618