Path to this page:
Subject: CVS commit: [pkgsrc-2018Q1] pkgsrc/devel/jq
From: S.P.Zeidler
Date: 2018-06-17 14:43:56
Message id: 20180617124356.D2017FBEC@cvs.NetBSD.org
Log Message:
Pullup ticket #5766 - requested by bsiegert
devel/jq: security patch
Revisions pulled up:
- devel/jq/Makefile 1.15
- devel/jq/distinfo 1.9
- devel/jq/patches/patch-src_jv__print.c 1.1
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: ginsbach
Date: Wed May 30 16:03:48 UTC 2018
Modified Files:
pkgsrc/devel/jq: Makefile distinfo
Added Files:
pkgsrc/devel/jq/patches: patch-src_jv__print.c
Log Message:
CVE-2016-4074 denial-of-service (via upstream)
Fix present in jq-1.6rc1 (https://github.com/stedolan/jq/commit/83e2cf6).
The fix prevents 'infinite' recursion preventing stack exhaustion.
To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/devel/jq/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/jq/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/devel/jq/patches/patch-src_jv__print.c
Files: