Skip to content

Releases: robohack/yajl

Version 2.2.90 (beta)

07 Apr 01:40
Compare
Choose a tag to compare
Version 2.2.90 (beta) Pre-release
Pre-release

This (beta) release includes the following major fixes, changes, and
updates:

  • error messages now include the line number and character offset where
    the error was detected

  • numbers are always validated for over/under-flow if no parser
    callbacks are used

  • invalid leading zeros on numbers now produce a unique new lexer error
    message (and are always correctly identified)

  • many fixes and updates to the Makefiles have made the build more
    portable and more robust, and improve the results on macOS
    w.r.t. dynamic libraries.

  • tests and examples all include definitions for allocation functions
    that do error checking

Note that the previous release (release-2.2) included a fix for
CVE-2023-33460 (memory leak in yajl_parse_tree()) in commit#38220af, but
this release also includes the related yajl_complete_parse() fixes for
the example and test programs.

Full Changelog: release-2.2...release-2.2.90

CVE fixes

17 Jul 00:48
Compare
Choose a tag to compare

This release fixes CVE-2023-33460, CVE-2022-24795, and CVE-2017-16516 (originally for lloyd/yajl).

Full Changelog: release-2.1...release-2.2

YAJL with BSDMake Release 2.1

14 Feb 18:54
Compare
Choose a tag to compare

First full release using BSDMake for builds is now release-2.1.

Full Changelog: 2.1.0...release-2.1