diff mbox series

[bug#68154] gnu: jq: Update to 1.7.1 [security fixes].

Message ID 29337209b5d5479c2fdd27ba3cdf60411913c9ae.1703963643.git.timotej.lazar@araneo.si
State New
Headers show
Series [bug#68154] gnu: jq: Update to 1.7.1 [security fixes]. | expand

Commit Message

Timotej Lazar Dec. 30, 2023, 7:14 p.m. UTC 
Fixes CVE-2023-50246 and CVE-2023-50268.

* gnu/packages/web.scm (jq): Update to 1.7.1.

Change-Id: I21999732036c76faea711e0484fa8c0d75d8736f
---
 gnu/packages/web.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)


base-commit: f24b14767d362a84e6469682b4fe303b50f4b589

Comments

John Kehayias Dec. 31, 2023, 8:41 p.m. UTC | #1 
On Sat, Dec 30, 2023 at 08:14 PM, Timotej Lazar wrote:

> Fixes CVE-2023-50246 and CVE-2023-50268.
>
> * gnu/packages/web.scm (jq): Update to 1.7.1.
>
> Change-Id: I21999732036c76faea711e0484fa8c0d75d8736f
> ---
>  gnu/packages/web.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm
> index 67f59ca9f9..f61c4f045c 100644
> --- a/gnu/packages/web.scm
> +++ b/gnu/packages/web.scm
> @@ -5159,7 +5159,7 @@ (define-public uwsgi
>  (define-public jq
>    (package
>      (name "jq")
> -    (version "1.7")
> +    (version "1.7.1")
>      (source
>       (origin
>         (method url-fetch)
> @@ -5167,7 +5167,7 @@ (define-public jq
>                             "/releases/download/jq-" version
>                             "/jq-" version ".tar.gz"))
>         (sha256
> -        (base32 "0qnv8k9x8i6i24n9vx3cxgw0yjj1411silc4wksfcinrfmlhsaj0"))
> +        (base32 "1hl0wppdwwrqf3gzg3xwc260s7i1br2lnc97zr1k8bpx56hrr327"))
>         (modules '((guix build utils)))
>         (snippet
>          ;; Remove bundled onigurama.
>
> base-commit: f24b14767d362a84e6469682b4fe303b50f4b589

Thanks, pushed as 1709f1bc924d1ebbd21797fc41c061a5eee5c352.
diff mbox series

Patch

diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm
index 67f59ca9f9..f61c4f045c 100644
--- a/gnu/packages/web.scm
+++ b/gnu/packages/web.scm
@@ -5159,7 +5159,7 @@  (define-public uwsgi
 (define-public jq
   (package
     (name "jq")
-    (version "1.7")
+    (version "1.7.1")
     (source
      (origin
        (method url-fetch)
@@ -5167,7 +5167,7 @@  (define-public jq
                            "/releases/download/jq-" version
                            "/jq-" version ".tar.gz"))
        (sha256
-        (base32 "0qnv8k9x8i6i24n9vx3cxgw0yjj1411silc4wksfcinrfmlhsaj0"))
+        (base32 "1hl0wppdwwrqf3gzg3xwc260s7i1br2lnc97zr1k8bpx56hrr327"))
        (modules '((guix build utils)))
        (snippet
         ;; Remove bundled onigurama.