upstream libjson-c security fix CVE-2013-6370, CVE-2013-6371