[meta-oe,wrynose,1/22] jq: ignore CVE-2025-49014

Message ID	20260903094954.3240723-1-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.210.179, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 1/22] jq: ignore CVE-2025-49014 Date: Thu, 3 Sep 2026 21:49:32 +1200 Message-ID: <20260903094954.3240723-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/22] jq: ignore CVE-2025-49014 \| expand [meta-oe,wrynose,1/22] jq: ignore CVE-2025-49014 [meta-oe,wrynose,2/22] lcms: patch CVE-2026-42798 [meta-multimedia,wrynose,3/22] libde265: mark CVE-2026-45382 and CVE-2026-45383 patched [meta-multimedia,wrynose,4/22] libde265: patch CVE-2026-49295 [meta-multimedia,wrynose,5/22] libde265: patch CVE-2026-49337 [meta-multimedia,wrynose,6/22] libde265: patch CVE-2026-49346 [meta-oe,wrynose,7/22] libfido2, libfido2-initial: ignore CVE-2026-40947 [meta-multimedia,wrynose,8/22] libheif: patch CVE-2026-32738 [meta-multimedia,wrynose,9/22] libheif: patch CVE-2026-32739 [meta-multimedia,wrynose,10/22] libheif: patch CVE-2026-32740 [meta-multimedia,wrynose,11/22] libheif: patch CVE-2026-32741 [meta-multimedia,wrynose,12/22] libheif: patch CVE-2026-41071 [meta-multimedia,wrynose,13/22] libheif: patch CVE-2026-62289 [meta-multimedia,wrynose,14/22] libheif: patch CVE-2026-62377 [meta-networking,wrynose,15/22] libiec61850: mark CVE-2024-45969 patched [meta-networking,wrynose,16/22] libiec61850: patch CVE-2026-18582 [meta-networking,wrynose,17/22] libiec61850: patch CVE-2026-18583 [meta-networking,wrynose,18/22] libiec61850: patch CVE-2026-19108 [meta-networking,wrynose,19/22] libiec61850: patch CVE-2026-19206 [meta-oe,wrynose,20/22] libkcapi: patch CVE-2026-71226 [meta-oe,wrynose,21/22] libkcapi: patch CVE-2026-71227 [meta-oe,wrynose,22/22] libkcapi: patch CVE-2026-71225

Message ID

20260903094954.3240723-1-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][wrynose][PATCH 1/22] jq: ignore CVE-2025-49014
Date: Thu,  3 Sep 2026 21:49:32 +1200
Message-ID: <20260903094954.3240723-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,wrynose,1/22] jq: ignore CVE-2025-49014 | expand

Commit Message

Ankur Tyagi Sept. 3, 2026, 9:49 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details:
https://nvd.nist.gov/vuln/detail/cve-2025-49014

Fixes:
WARNING: jq-1.8.1-r0 do_sbom_cve_check_recipe: jq-1.8.1: Found unpatched CVEs: CVE-2025-49014

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-devtools/jq/jq_1.8.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-devtools/jq/jq_1.8.1.bb b/meta-oe/recipes-devtools/jq/jq_1.8.1.bb
index 5d2a1be398..9d4ae74c00 100644
--- a/meta-oe/recipes-devtools/jq/jq_1.8.1.bb
+++ b/meta-oe/recipes-devtools/jq/jq_1.8.1.bb
@@ -30,6 +30,8 @@  SRC_URI = "git://github.com/jqlang/jq.git;protocol=https;branch=master;tag=jq-${
            file://CVE-2026-39956.patch \
            "
 
+CVE_STATUS[CVE-2025-49014] = "fixed-version: fixed in v1.8.1"
+
 inherit autotools ptest
 
 UPSTREAM_CHECK_GITTAGREGEX = "${BPN}-(?P<pver>\d+(\.\d+)+)"

[meta-oe,wrynose,1/22] jq: ignore CVE-2025-49014

Commit Message

Patch