Bug#1040159: epics-base: embedded yajl is vulnerable to CVE-2017-16516 and CVE-2022-24795

PICCA Frederic-Emmanuel frederic-emmanuel.picca at synchrotron-soleil.fr
Wed Jul 26 11:07:30 BST 2023


Hello,

I dicovered that upstream modifier yajl in order to support json5.
I am wondering if their modification could not be integrated in our yajl.

I fill a burg report about this idea here

https://github.com/epics-base/epics-base/issues/405

Tell me what is your opinion about this.

Cheers

Fred



More information about the debian-science-maintainers mailing list