From 6112eff59ac7389ca6f3f2b6899bed9041c33156 Mon Sep 17 00:00:00 2001 From: Nicolas Graves Date: Thu, 6 Mar 2025 22:43:56 +0100 Subject: [PATCH] gnu: jq: Add lint-hidden-cve property. * gnu/packages/web.scm (jq)[properties]: Add lint-hidden-cve property. Signed-off-by: Zheng Junjie --- gnu/packages/web.scm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 07399042aede722c3787cc9d345619e0c0ea10b6..8c1c5506e9ce9ac0cdff8881bcdb0caf3d98ca64 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -5652,7 +5652,10 @@ grep and friends let you play with text. It is written in portable C. jq can mangle the data format that you have into the one that you want with very little effort, and the program to do so is often shorter and simpler than you'd expect.") - (license (list license:expat license:cc-by3.0)))) + (license (list license:expat license:cc-by3.0)) + ;; Both those CVEs are actually fixed in version 1.7.1. + (properties `((lint-hidden-cve . ("CVE-2023-50246" + "CVE-2023-50268")))))) (define-public go-github-com-mikefarah-yq-v4 (package