{"id":"MGASA-2022-0487","summary":"Updated python-ujson packages fix security vulnerability","details":"Fixes len integer overflow issue. (RHBZ#2149975)\nUltrajson doesn't build on webassembly (e.g. pyodide) because the version\nof double-conversion used is too old. This updates it to a newer version\nwhich supports webassembly.\n","modified":"2026-04-16T04:22:45.395068Z","published":"2022-12-30T22:39:00Z","references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2022-0487.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=31332"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MJ66UZLJXIEOD5Q74IZKQQRWAPPFG6T7/"},{"type":"WEB","url":"https://github.com/ultrajson/ultrajson/pull/570"}],"affected":[{"package":{"name":"python-ujson","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/python-ujson?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2022-0487.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}