summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVijay Anusuri <vanusuri@mvista.com>2025-06-04 09:10:53 +0530
committerKhem Raj <raj.khem@gmail.com>2025-06-03 22:01:47 -0700
commit547f2a0939cb0335592fefaa5ad52f8514d68cd4 (patch)
tree3f036e5b1128f2940ec6e6ec34fb06cf27621bcd
parent09be9f040c7a6df7eba0386cffa6417c89178613 (diff)
downloadmeta-openembedded-547f2a0939cb0335592fefaa5ad52f8514d68cd4.tar.gz
jq: upgrade 1.7.1 -> 1.8.0
Changelog: ========== https://github.com/jqlang/jq/releases/tag/jq-1.8.0 Security fixes * CVE-2024-23337: Fix signed integer overflow in jvp_array_write and jvp_object_rehash. @itchyny de21386 The fix for this issue now limits the maximum size of arrays and objects to 536870912 (2^29) elements. * CVE-2024-53427: Reject NaN with payload while parsing JSON. @itchyny a09a4df The fix for this issue now drops support for NaN with payload in JSON (like NaN123). Other JSON extensions like NaN and Infinity are still supported. * CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt. @itchyny c6e0416 * Fix use of uninitialized value in check_literal. @itchyny #3324 * Fix segmentation fault on strftime/1, strflocaltime/1. @itchyny #3271 * Fix unhandled overflow in @base64d. @emanuele6 #3080 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-devtools/jq/jq_1.8.0.bb (renamed from meta-oe/recipes-devtools/jq/jq_1.7.1.bb)7
1 files changed, 2 insertions, 5 deletions
diff --git a/meta-oe/recipes-devtools/jq/jq_1.7.1.bb b/meta-oe/recipes-devtools/jq/jq_1.8.0.bb
index a6a1d6a07a..af35324b5f 100644
--- a/meta-oe/recipes-devtools/jq/jq_1.7.1.bb
+++ b/meta-oe/recipes-devtools/jq/jq_1.8.0.bb
@@ -6,13 +6,13 @@ HOMEPAGE = "https://jqlang.github.io/jq/"
6BUGTRACKER = "https://github.com/jqlang/jq/issues" 6BUGTRACKER = "https://github.com/jqlang/jq/issues"
7SECTION = "utils" 7SECTION = "utils"
8LICENSE = "MIT" 8LICENSE = "MIT"
9LIC_FILES_CHKSUM = "file://COPYING;md5=488f4e0b04c0456337fb70d1ac1758ba" 9LIC_FILES_CHKSUM = "file://COPYING;md5=08ffb5ac7e7e6bfc66968b89f01f512a"
10 10
11GITHUB_BASE_URI = "https://github.com/jqlang/${BPN}/releases/" 11GITHUB_BASE_URI = "https://github.com/jqlang/${BPN}/releases/"
12SRC_URI = "${GITHUB_BASE_URI}/download/${BPN}-${PV}/${BPN}-${PV}.tar.gz \ 12SRC_URI = "${GITHUB_BASE_URI}/download/${BPN}-${PV}/${BPN}-${PV}.tar.gz \
13 file://run-ptest \ 13 file://run-ptest \
14 " 14 "
15SRC_URI[sha256sum] = "478c9ca129fd2e3443fe27314b455e211e0d8c60bc8ff7df703873deeee580c2" 15SRC_URI[sha256sum] = "91811577f91d9a6195ff50c2bffec9b72c8429dc05ec3ea022fd95c06d2b319c"
16 16
17inherit autotools github-releases ptest 17inherit autotools github-releases ptest
18 18
@@ -26,9 +26,6 @@ PACKAGECONFIG[oniguruma] = "--with-oniguruma,--without-oniguruma,onig"
26# enable if you want ptest running under valgrind 26# enable if you want ptest running under valgrind
27PACKAGECONFIG[valgrind] = "--enable-valgrind,--disable-valgrind,valgrind" 27PACKAGECONFIG[valgrind] = "--enable-valgrind,--disable-valgrind,valgrind"
28 28
29# Gets going with gcc-15 but See if it can be removed with next upgrade
30CFLAGS += "-std=gnu17"
31
32do_configure:append() { 29do_configure:append() {
33 sed -i -e "/^ac_cs_config=/ s:${WORKDIR}::g" ${B}/config.status 30 sed -i -e "/^ac_cs_config=/ s:${WORKDIR}::g" ${B}/config.status
34} 31}