Your message dated Mon, 17 Mar 2025 19:09:10 +0000
with message-id <[email protected]>
and subject line Bug#1100715: fixed in json-glib 1.10.6+ds-2
has caused the Debian Bug report #1100715,
regarding libjson-glib-1.0-0: Missing escape of ASCII “US” control character 
may result in broken JSON output
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1100715: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1100715
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libjson-glib-1.0-0
Version: 1.10.6+ds-1
Severity: important

Dear Maintainer,

when an input string contains the “US” (0x1f) control character, it is not
encoded in the JSON output as required by RFC 8259. As a result, a consumer
application will usually reject the JSON. The bug is present in *all* released
versions of the library, including the Bookworm and Testing (Trixie) packages.

See https://gitlab.gnome.org/GNOME/json-glib/-/issues/79 for the full bug
report and a small test case to reproduce the issue.

The fix is a one-liner (actually adding a single char), see
https://gitlab.gnome.org/GNOME/json-
glib/-/merge_requests/95/diffs#36b33137ef9e9aaf2eb982f617ab2e1c704604e9, but
has not yet been released.
It would be great if it could be added to the packages as to avoid the sporadic
“mysterious” errors in consumers iff they receive the broken JSON input.


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.17-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libjson-glib-1.0-0 depends on:
ii  libc6                    2.41-4
ii  libglib2.0-0t64          2.84.0-2
ii  libjson-glib-1.0-common  1.10.6+ds-1

libjson-glib-1.0-0 recommends no packages.

libjson-glib-1.0-0 suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: json-glib
Source-Version: 1.10.6+ds-2
Done: Jeremy Bícha <[email protected]>

We believe that the bug you reported is fixed in the latest version of
json-glib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jeremy Bícha <[email protected]> (supplier of updated json-glib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 17 Mar 2025 14:31:22 -0400
Source: json-glib
Built-For-Profiles: noudeb
Architecture: source
Version: 1.10.6+ds-2
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers 
<[email protected]>
Changed-By: Jeremy Bícha <[email protected]>
Closes: 1100715
Changes:
 json-glib (1.10.6+ds-2) unstable; urgency=medium
 .
   * Cherry-pick patch to fix escape of the US control character
     (Closes: #1100715)
Checksums-Sha1:
 8345db56b0d4b853091dfb9785cdad0930879979 2846 json-glib_1.10.6+ds-2.dsc
 388e5d21890232e2f515aacf146a26436b030d96 11344 
json-glib_1.10.6+ds-2.debian.tar.xz
 76868aa6a8306168f5b97df9e4952a182663f0c0 12587 
json-glib_1.10.6+ds-2_source.buildinfo
Checksums-Sha256:
 31cc8dd538e91f55708e19d787f9e5ec7f3f08020b47e012ab66d7cdbe9a8fa4 2846 
json-glib_1.10.6+ds-2.dsc
 96eae21a0c33328562b91242484f083a418e4c7e6c54b8ce1e06852b803dce4f 11344 
json-glib_1.10.6+ds-2.debian.tar.xz
 af3ace7a6793e90fe00380ca104a23fa272999af38a48df5eedabb312a65ab77 12587 
json-glib_1.10.6+ds-2_source.buildinfo
Files:
 5ad541e626f4fcb93d253750f82f04d2 2846 libs optional json-glib_1.10.6+ds-2.dsc
 2aab5184700c879b23b4bf819990b550 11344 libs optional 
json-glib_1.10.6+ds-2.debian.tar.xz
 4687918522b7fd3f7e3bf2eb9b8cd3f4 12587 libs optional 
json-glib_1.10.6+ds-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/I7E
-----END PGP SIGNATURE-----

Attachment: pgp2Q0uiVGSlt.pgp
Description: PGP signature


--- End Message ---

Reply via email to