mbox series

[meta-oe,scarthgap,v2,0/1] jq-1.7.1: Backport multiple CVE fixes

Message ID 20250708080158.50374-2-roland.kovacs@est.tech
Headers show
Series jq-1.7.1: Backport multiple CVE fixes | expand

Message

roland.kovacs@est.tech July 8, 2025, 8:01 a.m. UTC 
From: Roland Kovacs <roland.kovacs@est.tech>

I forgot to run patchtest before sending v1, so this version includes the missing
'Upstream-Status' and 'CVE' fields in the added patch files.

Roland Kovacs (1):
  jq-1.7.1: Backport multiple CVE fixes

 .../jq/jq/CVE-2024-23337.patch                | 236 ++++++++++++++++++
 .../jq/jq/CVE-2024-53427.patch                |  82 ++++++
 .../jq/jq/CVE-2025-48060.patch                |  48 ++++
 meta-oe/recipes-devtools/jq/jq_1.7.1.bb       |   3 +
 4 files changed, 369 insertions(+)
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-23337.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-53427.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2025-48060.patch