CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

devel/yajl 2.1.0

Portable JSON parsing and serialization library in ANSI C

Maintainer
gregf@hugops.pw
Packages
latest: 2.1.0
Upstream
up to date
Last update
to 2.1.0 · 80b823153b
Quarterly
2026Q4: 2.1.0
WWW
http://lloyd.github.com/yajl/
Links
cgit · VuXML

Unaddressed (1)

The CVE record lists the packaged version 2.1.0 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2023-334606.52023-06-06There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

VuXML only (0)

Listed in VuXML, the packaged version 2.1.0 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (34)

Gleb Popov (arrowd) · 2.1.0
devel/yajl: Fix building with CMake 4

PR:		298948
Approved by:	portmgr (fixit blanket)
80b823153b
Stefan Eßer (se) · 2.1.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.1.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 2.1.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.1.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias C. Berner (tcberner) · 2.1.0
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Luca Pizzamiglio (pizzamig) · 2.1.0
devel/yajl: Take maintainership

PR:		226095
Submitted by:	Greg Fitzgerald <gregf@hugops.pw>
21215bc725
Jan Beich (jbeich) · 2.1.0
Adjust TEST_WRKSRC for USES=[cq]make:outsource

Approved by:	rakuco
Differential Revision:	https://reviews.freebsd.org/D8274
e67dc162af
Dmitry Marakasov (amdmi3) · 2.1.0
- Enable tests

PR:		212392
Submitted by:	t@tobik.me
75c9a8fb99
Dmitry Marakasov (amdmi3) · 2.1.0
- Fix trailing whitespace in pkg-descrs, categories [a-f]*

Approved by:	portmgr blanket
1d1f878054
Mathieu Arnold (mat) · 2.1.0
Update ports in the [bcd]* categories to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight
c6457ffef4
Pietro Cerutti (gahr) · 2.1.0
- Reset maintainership of my ports
c020107379
Baptiste Daroussin (bapt) · 2.1.0
Cleanup plist
282a9bc4b9
Pietro Cerutti (gahr) · 2.1.0
- Fix pkg-config includedir. Reported upstream:   https://github.com/lloyd/yajl/pull/139
4d3b3b848c
Pietro Cerutti (gahr) · 2.1.0
- Update to 2.1.0

ChangeLog:

  * fixed some compiler warnings
  * documentation improvements
  * build fix for NetBSD (and whenever sh != bash)
  * allow client to reset generator
  * remove bash dependencies
  * add api tests
  * remove ruby dependency
  * nmake install works on windows
  * build fix for qnx
  * debugging improvements
  * json_verify supports -s flag for stream processing
  * json_reformat supports -s flag for stream processing

- Take maintainership
b8a678b0d4
Baptiste Daroussin (bapt) · 2.0.4_1
License is acually ISC
ccab8112cb
Baptiste Daroussin (bapt) · 2.0.4_1
Drop maintainership
4ceae583cc
Baptiste Daroussin (bapt) · 2.0.4_1
Use stage
276de8ce4c
Baptiste Daroussin (bapt) · 2.0.4_1
Add NO_STAGE all over the place in preparation for the staging support (cat: devel part 4)
77d32abc6b
Baptiste Daroussin (bapt) · 2.0.4_1
Trim header Remove leading article from comment
03409dc655
Max Brazhnikov (makc) · 2.0.4_1
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended   for users

Approved by:	portmgr (miwi)
ffd97a0193
Baptiste Daroussin (bapt) · 2.0.4_1
- Fix plist

Reported by:	beat
2779eeaa2b
Baptiste Daroussin (bapt) · 2.0.4_1
- switch to USE_GITHUB macros
298165fe49
Baptiste Daroussin (bapt) · 2.0.4_1
Fix plist
70ec55faba
Baptiste Daroussin (bapt) · 2.0.4_1
Fix plist (and .pc file location)

Reported by:	kwm
7099f3eb9f
Baptiste Daroussin (bapt) · 2.0.4
Mirror back, apparently we still got some problems fetching from github from time to time
45ce78f3ef
Baptiste Daroussin (bapt) · 2.0.4
- update to 2.0.4 - direct download from github, stop mirroring the distfile
407b74d9fd
Chris Rees (crees) · 2.0.1
Fix DISTNAME for fetching

Pointyhat to:	bapt
Feature safe:	yes
52bd1e00f8
Baptiste Daroussin (bapt) · 2.0.1
Upgrade yajl to 2.0.1 (mirror it my self as upstream still not provide real static distfiles) Take back maintainership chase library bump

Feature safe:	yes
020aac7d6e
Baptiste Daroussin (bapt) · 1.0.11
Upstream does not seem to have the willing of providing real distfiles: (https://github.com/lloyd/yajl/issues/16)

I'll still mirror the old distfile for a while, but won't do that for upgrades

Then back to the pool
205c0f6c61
Baptiste Daroussin (bapt) · 1.0.11
- Upgrade to 1.0.11 - Add license - Remove workaround for now not supported version of FreeBSD - Mirror it on my own as upstream still rely on github tags instead of providing real distfiles

Feature safe:	yes
d8ba670df2
Baptiste Daroussin (bapt) · 1.0.9_1
Change maintainer address to my new @FreeBSD.org

Approved by:	jadawin@ (co-mentor)
5a4055b083
Wen Heping (wen) · 1.0.9_1
- Fix build on FreeBSD-6 reported by QAT@
526d4e9e92
Wen Heping (wen) · 1.0.9
Yet Another JSON Library. YAJL is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. YAJL is released under the BSD license.

WWW:    http://lloyd.github.com/yajl/

PR:		ports/145178
Submitted by:	Bapt <baptiste.daroussin@gmail.com>
313ad2cb0f