BSD Portsconverters/p5-Cpanel-JSON-XS 4.43 NetBSD
JSON serialising/deserialising, done correctly and fast (cPanel fork)
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
ac6da7795b- License
- gnu-gpl-v2 OR artistic
- Categories
- converters, textproc, perl5
- Package size
- 81.7 KiB, 345.6 KiB installed
Description
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be *correct* and its secondary goal is to be *fast*. To reach the latter goal it was written in C.
As this is the n-th-something JSON module on CPAN, what was the reason to write yet another JSON module? While it seems there are many JSON modules, none of them correctly handle all corner cases, and in most cases their maintainers are unresponsive, gone missing, or not listening to bug reports for other reasons.
The cPanel fork has additional bug fixes and interoperability improvements.
In the other systems
The newest version among them is 4.80, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | converters/p5-Cpanel-JSON-XS | 4.43 behind since 2026-09-04 | none known | - | [email protected] | 2026-10-18 |
| FreeBSD | converters/p5-Cpanel-JSON-XS | 4.52 behind since 2026-10-05 | none known | - | [email protected] | 2026-09-19 |
| OpenBSD | converters/p5-Cpanel-JSON-XS | 4.80 newest | no data | - | Alexander Bluhm <[email protected]> | 2026-10-19 |
| DragonFly | converters/p5-Cpanel-JSON-XS | 4.39 behind since 2026-07-08 | none known | - | [email protected] | - |
| MidnightBSD | converters/p5-Cpanel-JSON-XS | 4.40 behind since 2026-07-08 | no data | - | [email protected] | - |
| HardenedBSD | converters/p5-Cpanel-JSON-XS | 4.52 behind since 2026-10-05 | no data | - | [email protected] | - |
| GhostBSD | converters/p5-Cpanel-JSON-XS | 4.52 behind since 2026-10-05 | no data | - | [email protected] | - |
Version history 3
Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.
Install
Binary package:
pkgin install p5-Cpanel-JSON-XSFrom pkgsrc:
cd /usr/pkgsrc/converters/p5-Cpanel-JSON-XS && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 4.43 |
| NetBSD 10.1 aarch64 | 4.43 |
| SmartOS / illumos x86_64 | 4.80 |
| macOS 15 arm64 | 4.80 |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 4
Required by 1
Commit history 4
| Date | Commit | Credits | Log message |
|---|---|---|---|
ac6da7795b |
wiz | p5-Cpanel-JSON-XS: update to 4.80. 4.80 2026-09-?? (rurban)
- Security fixes, reported by Stig Palmquist (CPANSec):
* CVE-2026-110672 decode: free the hash key on "Duplicate keys not
allowed" and on a missing ':' (leak).
* CVE-2026-110673 decode: charge allow_tags "(" nesting against
max_depth (stack overflow).
* CVE-2026-110674 decode: look bare keys up as UTF-8, so the
duplicate check no longer misses or crashes on non-ASCII keys.
* CVE-2026-110675 decode: validate bare hash keys as UTF-8 like
quoted keys (malformed keys).
* CVE-2026-110676 encode: compact allow_bignum Math::BigFloat
values with huge exponents (30MB from 12 bytes).
* CVE-2026-110677 decode: fix the dupkeys_as_arrayref reference
counts (leaked every array).
… |
|
433885be98 |
wiz | p5-Cpanel-JSON-XS: update to 4.53. 4.53 2026-09-28 (rurban)
- Fix C90 violations with arm neon (GH #258 rjbs)
- Added a native arm64 test runner.
4.52 2026-09-12 (rurban)
- OSX 10.9 fix for SIMD UTF-8 (Christian Carey)
- Change my maintainer email to [email protected]
4.51 2026-09-11 (rurban)
- Add faster SIMD UTF-8 validation (GH #213, Zhang Boyang)
https://github.com/cyb70289/utf8, MIT.
- Fix tests for yath (GH #255, with H.Merijn Brand): the test files now
work with Test2::Harness instead of only Test::Harness, and a yath
run is added to `make xtest` when yath is installed.
- Skip one t/117_numbers.t test on Perls with 32-bit IVs (GH #254,
Jeremy Hansen).
4.50 2026-09-08 (rurban)
- Add $json->encode_to($fh, $data, [$type]) to stream encoded JSON directly
… |
|
e5868b2679 |
wen | Update to 4.43 Upstream changes:
4.43 2026-07-18 (rurban)
- Fix canonical sort: compare by UTF-16 code units per RFC 8785 (GH #248, leont)
- Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts
UTF-8 decoding instead of checking SvUTF8 flag, since older Perls
may store valid UTF-8 hash keys without the flag set.
- Fix quadmath encode dropping ".0" for large floats (GH #246, reported by Tux).
The .0 guard condition that suppressed appending for NV values > UV_MAX was
incorrect on high-precision FP (quadmath, 128-bit long double on arm64) where
%g uses fixed-point notation for values like 1.01e30. Guarded with #if NV_DIG < 31
to skip only on double/80-bit-ld where %g naturally uses %e for large values.
… |
|
618415630a |
wiz | *: recursive bump for perl5 5.44.0 |