json-smart (2.5.2-1) unstable; urgency=medium

  * New upstream version 2.5.2:
    - Fixes CVE-2024-57699: A security issue was found in Netplex Json-smart
      2.5.0 through 2.5.1. When loading a specially crafted JSON input,
      containing a large number of ’{’, a stack exhaustion can be trigger,
      which could allow an attacker to cause a Denial of Service (DoS). This
      issue exists because of an incomplete fix for CVE-2023-1370.
      (Closes: #1095839)
  * Refreshing patches

 -- Pierre Gruet <pgt@debian.org>  Sun, 16 Feb 2025 15:47:20 +0100

json-smart (2.5.1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 2.5.1 (Closes: #1068940)
  * Refreshing patches
  * Refreshing d/copyright
  * Fixing Vcs-* fields in d/control
  * Simplifying d/rules after the parent pom was removed from the source package
  * Providing a parent pom in the debian/ directory, to be used during the build
  * Packaging with jar instead of bundle
  * Comparing milliseconds since epoch instead of precise instants in test
  * Removing unneeded versioned B-D on maven-debian-helper

 -- Pierre Gruet <pgt@debian.org>  Wed, 04 Dec 2024 22:16:05 +0100

json-smart (2.2-3) unstable; urgency=medium

  * Team upload
  * Add watch file
  * Fix CVE-2023-1370: When reaching a ‘[‘ or ‘{‘ character
    in the JSON input, the code parses an array or
    an object respectively. It was discovered that the
    code does not have any limit to the nesting of such arrays
    or objects. Since the parsing of nested arrays and objects is
    done recursively, nesting too many of them can cause
    a stack exhaustion (stack overflow) and crash the software.
    (Closes: #1033474)
  * Use compat level 13
  * Bump policy to 4.7.7
  * Add salsa-CI

 -- Bastien Roucariès <rouca@debian.org>  Sat, 13 Apr 2024 14:43:01 +0000

json-smart (2.2-2) unstable; urgency=medium

  * Team upload.
  * Add maven-bundle-plugin-failok.patch and work around a FTBFS
    caused by a bug in maven-bundle-plugin. See #868913 for more information.
    (Closes: #868603)
  * Switch to compat level 10.
  * Declare compliance with Debian Policy 4.1.1.
  * Use https for format field.

 -- Markus Koschany <apo@debian.org>  Mon, 16 Oct 2017 15:52:50 +0200

json-smart (2.2-1) unstable; urgency=medium

  * New upstream release
    - Build the new accessors-smart module
    - Ignore the timezone dependent tests in TestDateConvert
  * Standards-Version updated to 3.9.8

 -- Emmanuel Bourg <ebourg@apache.org>  Wed, 03 Aug 2016 10:06:43 +0200

json-smart (1.2-1) unstable; urgency=medium

  * Initial release (Closes: #819635)

 -- Emmanuel Bourg <ebourg@apache.org>  Thu, 31 Mar 2016 13:21:52 +0200