Patch jq for CVE-2025-48060

Author: azurelinux-security

SPECS/jq/jq.spec

@@ -1,14 +1,15 @@
 Summary:        jq is a lightweight and flexible command-line JSON processor.
 Name:           jq
 Version:        1.6
-Release:        3%{?dist}
+Release:        4%{?dist}
 Group:          Applications/System
 Vendor:         Microsoft Corporation
 License:        MIT
 URL:            https://github.com/stedolan/jq
 Source0:        https://github.com/stedolan/jq/releases/download/%{name}-%{version}/%{name}-%{version}.tar.gz
 Distribution:   Mariner
 Patch0:         CVE-2024-23337.patch
+Patch1:         CVE-2025-48060.patch
 BuildRequires:  bison
 BuildRequires:  chrpath
 BuildRequires:  flex
@@ -59,6 +60,9 @@ make check
 %{_includedir}/*
 
 %changelog
+* Thu Jul 24 2025 Azure Linux Security Servicing Account <[email protected]> - 1.6-4
+- Patch for CVE-2025-48060
+
 * Mon May 26 2025 Akhila Guruju <[email protected]> - 1.6-3
 - Patch CVE-2024-23337