Package: jq / 1.7.1-6+deb13u1

Metadata

Package Version Patches format
jq 1.7.1-6+deb13u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
patch version into build.patch | (download)

scripts/version | 13 1 + 12 - 0 !
1 file changed, 1 insertion(+), 12 deletions(-)

 set release version manually.

jq sets the build version by parsing the git branch. There is no git branch during
package building however. This patch sets the version manually. The version can be
looked up using `git describe --tags --match 'upstream*' | sed 's/^upstream\///'`.
Bug: https://github.com/stedolan/jq/issues/434
dont distribute duplicate docs.patch | (download)

Makefile.am | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 do not distribute copying, fixes lintian warning

0008 Do not use venderized oniguruma.patch | (download)

Makefile.am | 7 0 + 7 - 0 !
1 file changed, 7 deletions(-)

 do not use venderized oniguruma


disable static libtool.patch | (download)

Makefile.am | 3 1 + 2 - 0 !
tests/setup | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 3 deletions(-)

 ensure jq doesn't statically link in libraries

0006 Do not use pipenv to build docs.patch | (download)

Makefile.am | 8 4 + 4 - 0 !
configure.ac | 25 0 + 25 - 0 !
2 files changed, 4 insertions(+), 29 deletions(-)

 do not use pipenv to build docs


libtool.patch | (download)

tests/setup | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---
CVE 2024 53427.patch | (download)

src/jv.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 reject nan with payload while parsing json


CVE 2024 23337.patch | (download)

src/jv.c | 45 36 + 9 - 0 !
src/jv_aux.c | 9 5 + 4 - 0 !
tests/jq.test | 4 4 + 0 - 0 !
3 files changed, 45 insertions(+), 13 deletions(-)

 fix signed integer overflow in jvp_array_write and jvp_object_rehash


CVE 2025 48060.patch | (download)

src/jv.c | 1 1 + 0 - 0 !
tests/jq.test | 4 4 + 0 - 0 !
2 files changed, 5 insertions(+)

 fix heap buffer overflow when formatting an empty string