Given that this package parses JSON data and has had one security issue
in the past year, it would probably benefit from a quick security
review.

** Description changed:

  Availability:
  The package is available in universe, built on all architectures.
  
  Rationale:
  The package is a Build-Depends for libteam, which itself is a (Build-)Depends 
of network-manager.
  
  Security:
- ???Could not find any related security advisories.
+ There has been one issue in the past year:
+  - CVE-2013-6401: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401
+    - Same issue as SA57497 and SA56777
  
  Quality assurance:
  The package is well-maintained in Debian and expected to not require 
extensive effort to maintain in Ubuntu.
  
  UI standards:
  Not applicable.
  
  Dependencies:
  All build and binary dependencies are in main.
  
  Standards compliance:
  The package meets requirements.
  
  Maintenance:
  The package meets requirements.
  
  Background information:
  jansson is a library for parsing and handling JSON data.

** Description changed:

  Availability:
  The package is available in universe, built on all architectures.
  
  Rationale:
  The package is a Build-Depends for libteam, which itself is a (Build-)Depends 
of network-manager.
  
  Security:
  There has been one issue in the past year:
-  - CVE-2013-6401: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401
-    - Same issue as SA57497 and SA56777
+  - CVE-2013-6401: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401
+    - Same issue as SA57497 and SA56777
  
  Quality assurance:
- The package is well-maintained in Debian and expected to not require 
extensive effort to maintain in Ubuntu.
+ The package appears to be reasonably well-maintained in Debian and expected 
to not require extensive effort to maintain in Ubuntu (straight sync usually).
  
  UI standards:
  Not applicable.
  
  Dependencies:
  All build and binary dependencies are in main.
  
  Standards compliance:
  The package meets requirements.
  
  Maintenance:
  The package meets requirements.
  
  Background information:
  jansson is a library for parsing and handling JSON data.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1392023

Title:
  [MIR] jansson

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jansson/+bug/1392023/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to