which kar...@tuta.io
--
karcio
7 Jul 2025 at 17:43 by czc...@debian.org:
> Control: retitle -1 unblock: jq/1.7.1-6+deb13u1
>
> On Mon, Jul 07, 2025 at 11:24:21PM +0800, ChangZhuo Chen (陳昌倬) wrote:
>
>> On Sun, Jul 06, 2025 at 09:18:00PM +0200, Sebastian Ramacher wrote:
>> > I think a targetted fix on top of 1.7.1 would be more appropriate. I
>> > don't expect all of " 190 files changed, 30175 insertions(+), 24688
>> > deletions(-)" is needed to fix CVE-2025-49104.
>>
>> I agree with Sebastian. Let's aim for a targeted fix on top of 1.7.1.
>>
>
> I have prepare jq 1.7.1-6+deb13u1 for CVE-2025-49104, please see
> attachment for debdiff.
>
>
> --
> ChangZhuo Chen (陳昌倬) czchen@{czchen,debian}.org
> Key fingerprint = BA04 346D C2E1 FE63 C790 8793 CC65 B0CD EC27 5D5B
>
