You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa python canonicaljson

Sigurnosni nedostatak programskog paketa python canonicaljson

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2020-12-10 01:13:07.368706

Name : python-canonicaljson
Product : Fedora 33
Version : 1.4.0
Release : 1.fc33
Summary : Canonical JSON
Description :
* Encodes objects and arrays as RFC 7159 JSON.
* Sorts object keys so that you get the same result each time.
* Has no inignificant whitespace to make the output as small as possible.
* Escapes only the characters that must be escaped,
U+0000 to U+0019 / U+0022 / U+0056, to keep the output as small as possible.
* Uses the shortest escape sequence for each escaped character.
* Encodes the JSON as UTF-8.
* Can encode frozendict immutable dictionaries.

Update Information:

Update matrix-synapse to 1.23.0 to resolve CVE-2020-26890. There may be
breaking changes, please review prior to upgrade:

* Mon Nov 30 2020 Gwyn Ciesla <> – 1.4.0-1
– 1.4.0

[ 1 ] Bug #1796270 – python-signedjson-1.1.1 is available
[ 2 ] Bug #1840452 – matrix-synapse-1.23.0 is available
[ 3 ] Bug #1861208 – python-canonicaljson-1.4.0 is available
[ 4 ] Bug #1864122 – matrix-synapse: FTBFS in Fedora rawhide/f33
[ 5 ] Bug #1901509 – CVE-2020-26890 matrix-synapse: DoS attack due to invalid JSON [fedora-all]

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-2578d943d2’ at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list —
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:

AutorDona Šeruga
Cert idNCERT-REF-2020-12-0001-ADV
More in Preporuke
Sigurnosni nedostaci programskog paketa chromium

Otkriveni su sigurnosni nedostaci u programskom paketu chromium za operacijski sustav openSUSE. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje DoS stanja...