File _patchinfo of Package patchinfo.25214
<patchinfo incident="25214">
<issue tracker="cve" id="2022-31116"/>
<issue tracker="cve" id="2022-31117"/>
<issue tracker="bnc" id="1201254">VUL-1: CVE-2022-31117: python-ujson: double free while reallocating a buffer for string decoding</issue>
<issue tracker="bnc" id="1201255">VUL-0: CVE-2022-31116: python-ujson: improper decoding of escaped surrogate characters may lead to string corruption, key confusion or value overwriting</issue>
<packager>mcepl</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for python-ujson</summary>
<description>This update for python-ujson fixes the following issues:
- CVE-2022-31116: Fixed improper decoding of escaped surrogate characters (bsc#1201255).
- CVE-2022-31117: Fixed a double free while reallocating a buffer for string decoding (bsc#1201254).
</description>
</patchinfo>