[packages/jq] up to 1.8.0 (fixes CVE-2024-23337 CVE-2024-53427 CVE-2025-48060)

atler atler at pld-linux.org
Sun Jun 1 14:07:52 CEST 2025


commit a39936b0872c40834cd57aeb649cfe4500d1fed9
Author: Jan Palus <atler at pld-linux.org>
Date:   Sun Jun 1 13:19:09 2025 +0200

    up to 1.8.0 (fixes CVE-2024-23337 CVE-2024-53427 CVE-2025-48060)

 jq.spec            | 15 ++++++---------
 static.patch       | 11 -----------
 tests-no-pty.patch |  2 +-
 3 files changed, 7 insertions(+), 21 deletions(-)
---
diff --git a/jq.spec b/jq.spec
index 35abfeb..b8a242a 100644
--- a/jq.spec
+++ b/jq.spec
@@ -12,15 +12,14 @@
 Summary:	Command-line JSON processor
 Summary(pl.UTF-8):	Procesor JSON działający z linii poleceń
 Name:		jq
-Version:	1.7.1
+Version:	1.8.0
 Release:	1
 License:	MIT, Apache, CC-BY, GPL v3
 Group:		Applications/Text
 #Source0Download: https://github.com/jqlang/jq/releases
 Source0:	https://github.com/jqlang/jq/releases/download/%{name}-%{version}/jq-%{version}.tar.gz
-# Source0-md5:	974a340105ecb43add8c55601525f9fc
-Patch0:		static.patch
-Patch1:		tests-no-pty.patch
+# Source0-md5:	46856841b9fd765b852023b881cd2e8b
+Patch0:		tests-no-pty.patch
 URL:		https://jqlang.github.io/jq/
 BuildRequires:	autoconf >= 2.65
 BuildRequires:	automake >= 1:1.11.2
@@ -28,9 +27,8 @@ BuildRequires:	bison >= 3
 BuildRequires:	flex
 BuildRequires:	libtool >= 2:2
 BuildRequires:	oniguruma-devel
-%if %{with tests_valgrind}
-BuildRequires:	valgrind
-%endif
+BuildRequires:	rpmbuild(macros) >= 1.527
+%{?with_tests_valgrind:BuildRequires:	valgrind}
 Requires:	%{name}-libs = %{version}-%{release}
 BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
@@ -91,7 +89,6 @@ Statyczna biblioteka jq.
 %prep
 %setup -q
 %patch -P0 -p1
-%patch -P1 -p1
 
 %build
 %{__libtoolize}
@@ -103,7 +100,7 @@ Statyczna biblioteka jq.
 	%{!?with_static_libs:--disable-static} \
 	--disable-all-static \
 	--disable-silent-rules \
-	%{!?with_tests_valgrind:--disable-valgrind}
+	%{__enable_disable tests_valgrind valgrind}
 
 echo -e '#!/bin/sh\necho "'%{version}'"' > scripts/version
 
diff --git a/static.patch b/static.patch
deleted file mode 100644
index 814009b..0000000
--- a/static.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- jq-1.5/Makefile.am~	2015-08-16 07:38:10.000000000 +0300
-+++ jq-1.5/Makefile.am	2016-05-02 18:36:32.459838273 +0300
-@@ -84,7 +84,7 @@
- 
- bin_PROGRAMS = jq
- jq_SOURCES = src/main.c src/version.h
--jq_LDFLAGS = -static-libtool-libs
-+jq_LDFLAGS =
- jq_LDADD = libjq.la -lm
- 
- if ENABLE_ALL_STATIC
diff --git a/tests-no-pty.patch b/tests-no-pty.patch
index 74b5705..b5935e3 100644
--- a/tests-no-pty.patch
+++ b/tests-no-pty.patch
@@ -1,7 +1,7 @@
 --- jq-1.7/tests/shtest.orig	2023-09-06 22:00:31.000000000 +0200
 +++ jq-1.7/tests/shtest	2023-09-09 14:40:45.573460403 +0200
 @@ -503,7 +503,7 @@
- cmp $d/warning $d/expect_warning
+ done
  
  # Check $NO_COLOR
 -test_no_color=true
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/jq.git/commitdiff/a39936b0872c40834cd57aeb649cfe4500d1fed9



More information about the pld-cvs-commit mailing list