[...] >> yajl upstream has been dead since 2015, so the current release tarball >> has multiple CVEs, which I've patched downstream by grabbing patches >> from github issue comments from third parties or other distros [1]. >> >> In the libvirt 10.8.0 release that just hit rawhide, we've switched to >> using json-c instead. Aside from libvirt in stable Fedora release >> branches, there are a few other packages in Fedora still using >> yajl that I see:
[...] >> xen There has been discussion on the Xen development mailing list about replacing yajl with json-c: https://www.mail-archive.com/[email protected]/msg200863.html -- Mike :wq -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
