From 3e0cc26e96a5e05ec86b748f1d25f9aff332a4a0 Mon Sep 17 00:00:00 2001 From: Vijay Anusuri Date: Wed, 4 Jun 2025 09:10:53 +0530 Subject: jq: upgrade 1.7.1 -> 1.8.0 Changelog: ========== https://github.com/jqlang/jq/releases/tag/jq-1.8.0 Security fixes * CVE-2024-23337: Fix signed integer overflow in jvp_array_write and jvp_object_rehash. @itchyny de21386 The fix for this issue now limits the maximum size of arrays and objects to 536870912 (2^29) elements. * CVE-2024-53427: Reject NaN with payload while parsing JSON. @itchyny a09a4df The fix for this issue now drops support for NaN with payload in JSON (like NaN123). Other JSON extensions like NaN and Infinity are still supported. * CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt. @itchyny c6e0416 * Fix use of uninitialized value in check_literal. @itchyny #3324 * Fix segmentation fault on strftime/1, strflocaltime/1. @itchyny #3271 * Fix unhandled overflow in @base64d. @emanuele6 #3080 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster --- meta-oe/recipes-devtools/jq/jq_1.7.1.bb | 49 --------------------------------- meta-oe/recipes-devtools/jq/jq_1.8.0.bb | 46 +++++++++++++++++++++++++++++++ 2 files changed, 46 insertions(+), 49 deletions(-) delete mode 100644 meta-oe/recipes-devtools/jq/jq_1.7.1.bb create mode 100644 meta-oe/recipes-devtools/jq/jq_1.8.0.bb diff --git a/meta-oe/recipes-devtools/jq/jq_1.7.1.bb b/meta-oe/recipes-devtools/jq/jq_1.7.1.bb deleted file mode 100644 index a6a1d6a07a..0000000000 --- a/meta-oe/recipes-devtools/jq/jq_1.7.1.bb +++ /dev/null @@ -1,49 +0,0 @@ -SUMMARY = "Lightweight and flexible command-line JSON processor" -DESCRIPTION = "jq is like sed for JSON data, you can use it to slice and \ - filter and map and transform structured data with the same \ - ease that sed, awk, grep and friends let you play with text." -HOMEPAGE = "https://jqlang.github.io/jq/" -BUGTRACKER = "https://github.com/jqlang/jq/issues" -SECTION = "utils" -LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://COPYING;md5=488f4e0b04c0456337fb70d1ac1758ba" - -GITHUB_BASE_URI = "https://github.com/jqlang/${BPN}/releases/" -SRC_URI = "${GITHUB_BASE_URI}/download/${BPN}-${PV}/${BPN}-${PV}.tar.gz \ - file://run-ptest \ - " -SRC_URI[sha256sum] = "478c9ca129fd2e3443fe27314b455e211e0d8c60bc8ff7df703873deeee580c2" - -inherit autotools github-releases ptest - -UPSTREAM_CHECK_REGEX = "releases/tag/${BPN}-(?P\d+(\.\d+)+)" - -PACKAGECONFIG ?= "oniguruma" - -PACKAGECONFIG[docs] = "--enable-docs,--disable-docs,ruby-native" -PACKAGECONFIG[maintainer-mode] = "--enable-maintainer-mode,--disable-maintainer-mode,flex-native bison-native" -PACKAGECONFIG[oniguruma] = "--with-oniguruma,--without-oniguruma,onig" -# enable if you want ptest running under valgrind -PACKAGECONFIG[valgrind] = "--enable-valgrind,--disable-valgrind,valgrind" - -# Gets going with gcc-15 but See if it can be removed with next upgrade -CFLAGS += "-std=gnu17" - -do_configure:append() { - sed -i -e "/^ac_cs_config=/ s:${WORKDIR}::g" ${B}/config.status -} - -do_install_ptest() { - cp -rf ${S}/tests ${D}${PTEST_PATH} - cp -rf ${B}/.libs ${D}${PTEST_PATH} - # libjq.so.* is packaged in the main jq component, so remove it from ptest - rm -f ${D}${PTEST_PATH}/.libs/libjq.so.* - ln -sf ${bindir}/jq ${D}${PTEST_PATH} - if [ "${@bb.utils.contains('PACKAGECONFIG', 'valgrind', 'true', 'false', d)}" = "false" ]; then - sed -i 's:#export NO_VALGRIND=1:export NO_VALGRIND=1:g' ${D}${PTEST_PATH}/run-ptest - fi - # handle multilib - sed -i s:@libdir@:${libdir}:g ${D}${PTEST_PATH}/run-ptest -} - -BBCLASSEXTEND = "native" diff --git a/meta-oe/recipes-devtools/jq/jq_1.8.0.bb b/meta-oe/recipes-devtools/jq/jq_1.8.0.bb new file mode 100644 index 0000000000..af35324b5f --- /dev/null +++ b/meta-oe/recipes-devtools/jq/jq_1.8.0.bb @@ -0,0 +1,46 @@ +SUMMARY = "Lightweight and flexible command-line JSON processor" +DESCRIPTION = "jq is like sed for JSON data, you can use it to slice and \ + filter and map and transform structured data with the same \ + ease that sed, awk, grep and friends let you play with text." +HOMEPAGE = "https://jqlang.github.io/jq/" +BUGTRACKER = "https://github.com/jqlang/jq/issues" +SECTION = "utils" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://COPYING;md5=08ffb5ac7e7e6bfc66968b89f01f512a" + +GITHUB_BASE_URI = "https://github.com/jqlang/${BPN}/releases/" +SRC_URI = "${GITHUB_BASE_URI}/download/${BPN}-${PV}/${BPN}-${PV}.tar.gz \ + file://run-ptest \ + " +SRC_URI[sha256sum] = "91811577f91d9a6195ff50c2bffec9b72c8429dc05ec3ea022fd95c06d2b319c" + +inherit autotools github-releases ptest + +UPSTREAM_CHECK_REGEX = "releases/tag/${BPN}-(?P\d+(\.\d+)+)" + +PACKAGECONFIG ?= "oniguruma" + +PACKAGECONFIG[docs] = "--enable-docs,--disable-docs,ruby-native" +PACKAGECONFIG[maintainer-mode] = "--enable-maintainer-mode,--disable-maintainer-mode,flex-native bison-native" +PACKAGECONFIG[oniguruma] = "--with-oniguruma,--without-oniguruma,onig" +# enable if you want ptest running under valgrind +PACKAGECONFIG[valgrind] = "--enable-valgrind,--disable-valgrind,valgrind" + +do_configure:append() { + sed -i -e "/^ac_cs_config=/ s:${WORKDIR}::g" ${B}/config.status +} + +do_install_ptest() { + cp -rf ${S}/tests ${D}${PTEST_PATH} + cp -rf ${B}/.libs ${D}${PTEST_PATH} + # libjq.so.* is packaged in the main jq component, so remove it from ptest + rm -f ${D}${PTEST_PATH}/.libs/libjq.so.* + ln -sf ${bindir}/jq ${D}${PTEST_PATH} + if [ "${@bb.utils.contains('PACKAGECONFIG', 'valgrind', 'true', 'false', d)}" = "false" ]; then + sed -i 's:#export NO_VALGRIND=1:export NO_VALGRIND=1:g' ${D}${PTEST_PATH}/run-ptest + fi + # handle multilib + sed -i s:@libdir@:${libdir}:g ${D}${PTEST_PATH}/run-ptest +} + +BBCLASSEXTEND = "native" -- cgit v1.2.3-54-g00ecf