[Bug 1746327] [NEW] [MIR] libfastjson

[Julian Andres Klode]

Public bug reported:

[Availability]
Available in universe for all architectures.

[Rationale]
rsyslog switched from json-c to fastjson between 8.16 and 8.32, so we need fastjson for upgrading it.

[Security]
A JSON parser must parse potentially untrusted data, not sure how that applies to its use in rsyslog - it would be strange if it parsed untrusted data there.

[Quality assurance]
Upstream has a test suite run at build.

[Dependencies]
Only debhelper + pkg-config

[Standards compliance]

[Maintenance]
There should not be any need for divergence from Debian and it seems actively maintained there. That said, as a dependency of rsyslog, foundations-bugs should be responsible.

** Affects: libfastjson (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libfastjson in Ubuntu.
https://bugs.launchpad.net/bugs/1746327

Title:
  [MIR] libfastjson

Status in libfastjson package in Ubuntu:
  New

Bug description:
  [Availability]
  Available in universe for all architectures.

  [Rationale]
  rsyslog switched from json-c to fastjson between 8.16 and 8.32, so we need fastjson for upgrading it.

  [Security]
  A JSON parser must parse potentially untrusted data, not sure how that applies to its use in rsyslog - it would be strange if it parsed untrusted data there.

  [Quality assurance]
  Upstream has a test suite run at build.

  [Dependencies]
  Only debhelper + pkg-config

  [Standards compliance]

  [Maintenance]
  There should not be any need for divergence from Debian and it seems actively maintained there. That said, as a dependency of rsyslog, foundations-bugs should be responsible.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libfastjson/+bug/1746327/+subscriptions