libjson-c: backport security fixes