| Message ID | 20250708080158.50374-2-roland.kovacs@est.tech |
|---|---|
| Headers | show |
| Series | jq-1.7.1: Backport multiple CVE fixes | expand |
Looks like v1 without Upstream-Status was merged to scarthgap, can you please rebase this v2 and send follow-up patch adding the Upstream-Status? On Tue, Jul 8, 2025 at 10:02 AM roland.kovacs via lists.openembedded.org <roland.kovacs=est.tech@lists.openembedded.org> wrote: > > From: Roland Kovacs <roland.kovacs@est.tech> > > I forgot to run patchtest before sending v1, so this version includes the missing > 'Upstream-Status' and 'CVE' fields in the added patch files. > > Roland Kovacs (1): > jq-1.7.1: Backport multiple CVE fixes > > .../jq/jq/CVE-2024-23337.patch | 236 ++++++++++++++++++ > .../jq/jq/CVE-2024-53427.patch | 82 ++++++ > .../jq/jq/CVE-2025-48060.patch | 48 ++++ > meta-oe/recipes-devtools/jq/jq_1.7.1.bb | 3 + > 4 files changed, 369 insertions(+) > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-23337.patch > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-53427.patch > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2025-48060.patch > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#118301): https://lists.openembedded.org/g/openembedded-devel/message/118301 > Mute This Topic: https://lists.openembedded.org/mt/114042961/3617156 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [martin.jansa@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- >
On Fri, 2025-08-01 at 22:29 +0200, Martin Jansa via lists.openembedded.org wrote: > Looks like v1 without Upstream-Status was merged to scarthgap, can you > please rebase this v2 and send follow-up patch adding the > Upstream-Status? > > On Tue, Jul 8, 2025 at 10:02 AM roland.kovacs via > lists.openembedded.org <roland.kovacs=est.tech@lists.openembedded.org> > wrote: > > > > From: Roland Kovacs <roland.kovacs@est.tech> > > > > I forgot to run patchtest before sending v1, so this version includes the missing > > 'Upstream-Status' and 'CVE' fields in the added patch files. > > > > Roland Kovacs (1): > > jq-1.7.1: Backport multiple CVE fixes > > > > .../jq/jq/CVE-2024-23337.patch | 236 ++++++++++++++++++ > > .../jq/jq/CVE-2024-53427.patch | 82 ++++++ > > .../jq/jq/CVE-2025-48060.patch | 48 ++++ > > meta-oe/recipes-devtools/jq/jq_1.7.1.bb | 3 + > > 4 files changed, 369 insertions(+) > > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-23337.patch > > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-53427.patch > > create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2025-48060.patch > > > > > > > > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#118823): https://lists.openembedded.org/g/openembedded-devel/message/118823 > Mute This Topic: https://lists.openembedded.org/mt/114042961/9897074 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [roland.kovacs@est.tech] > -=-=-=-=-=-=-=-=-=-=-=- Hi Martin, I see you already sent the fix out. Thanks for spotting this and sorry for not picking it up in time. Cheers, Roland
From: Roland Kovacs <roland.kovacs@est.tech> I forgot to run patchtest before sending v1, so this version includes the missing 'Upstream-Status' and 'CVE' fields in the added patch files. Roland Kovacs (1): jq-1.7.1: Backport multiple CVE fixes .../jq/jq/CVE-2024-23337.patch | 236 ++++++++++++++++++ .../jq/jq/CVE-2024-53427.patch | 82 ++++++ .../jq/jq/CVE-2025-48060.patch | 48 ++++ meta-oe/recipes-devtools/jq/jq_1.7.1.bb | 3 + 4 files changed, 369 insertions(+) create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-23337.patch create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2024-53427.patch create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2025-48060.patch