-
jq (1.5+dfsg-1ubuntu0.1) xenial-security; urgency=medium
* SECURITY UPDATE: Heap-based buffer overflow
- debian/patches/CVE-2015-8863.patch: Heap buffer overflow in tokenadd()
- CVE-2015-8863
-- Mike Salvatore <email address hidden> Fri, 07 Sep 2018 14:01:11 -0400
-
jq (1.5+dfsg-1) unstable; urgency=medium
* New upstream release.
* Acknowledge 1.4-2.1 NMU
* Add "Multi-Arch: foreign" flag (Closes: #799676)
* Remove "disable-valgrind-tests" patch (fixed by Upstream in 32ea50d:
http://git.io/vCC5r)
* Remove "disable-shared-lib" patch: libjq is still disabled, but libonig2
(new requirement for regular expressions) is linked dynamically. This is
done with the new patch "static-libjq-dynamic-libonig2".
* Add gbp.conf to strip minified Javascript dependencies from tarball
-- Simon Elsbrock <email address hidden> Sun, 11 Oct 2015 02:09:09 +0200
-
jq (1.4-2.1) unstable; urgency=medium
* Non-maintainer upload.
* Restore the 1.3-1.1 NMU changelog.
* Fix FTBFS on big endian architectures.
Add big-endian-fix.patch.
Patch by Dejan Latinovic <email address hidden>.
Closes: #754754.
-- Anibal Monsalve Salazar <email address hidden> Mon, 21 Jul 2014 07:42:05 +0100
