./devel/jq, Command-line JSON processor

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2018Q1, Version: 1.5nb4, Package name: jq-1.5nb4, Maintainer: pkgsrc-users

jq is a lightweight and flexible command-line JSON processor.

jq is like sed for JSON data - you can use it to slice and filter and
map and transform structured data with the same ease that sed, awk, grep
and friends let you play with text.


Required to run:
[textproc/oniguruma]

Required to build:
[pkgtools/cwrappers]

Package options: oniguruma

Master sites:

SHA1: 664638b560d9e734178e8cafb21d98817af5b5f3
RMD160: 33ac77ac93e0539f6d66d29cd717013cdab8cf61
Filesize: 1091.881 KB

Version history: (Expand)

CVS history: (Expand)


   2018-06-17 14:43:56 by S.P.Zeidler | Files touched by this commit (3) 
Log message:
Pullup ticket #5766 - requested by bsiegert
devel/jq: security patch

Revisions pulled up:
- devel/jq/Makefile                                             1.15
- devel/jq/distinfo                                             1.9
- devel/jq/patches/patch-src_jv__print.c                        1.1

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ginsbach
   Date:           Wed May 30 16:03:48 UTC 2018

   Modified Files:
           pkgsrc/devel/jq: Makefile distinfo
   Added Files:
           pkgsrc/devel/jq/patches: patch-src_jv__print.c

   Log message:
   CVE-2016-4074 denial-of-service (via upstream)

   Fix present in jq-1.6rc1 (https://github.com/stedolan/jq/commit/83e2cf6).
   The fix prevents 'infinite' recursion preventing stack exhaustion.

   To generate a diff of this commit:
   cvs rdiff -u -r1.14 -r1.15 pkgsrc/devel/jq/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/jq/distinfo
   cvs rdiff -u -r0 -r1.1 pkgsrc/devel/jq/patches/patch-src_jv__print.c