mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-13 15:47:23 +00:00
Code Issues Projects Releases Wiki Activity

jq: ignore already fixed CVEs

Browse Source 
All these CVEs are already fixed in the recipe version[1].

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-33948
https://nvd.nist.gov/vuln/detail/cve-2026-39979
https://nvd.nist.gov/vuln/detail/cve-2026-40164
https://nvd.nist.gov/vuln/detail/cve-2026-44777

[1]https://github.com/jqlang/jq/releases/tag/jq-1.8.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
This commit is contained in:
Ankur Tyagi committed 2026-10-13 11:50:55 +13:00
1 parent a7b6f19ac6
commit 1dac3dca9d
1 file changed
+4
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-devtools/jq/jq_1.8.2.bb
+4
View File
@@ -48,3 +48,7 @@ do_install_ptest() {
RDEPENDS:${PN}-ptest += "tzdata"
BBCLASSEXTEND = "native"
CVE_STATUS_GROUPS += "CVE_STATUS_FIXED_ALREADY"
CVE_STATUS_FIXED_ALREADY[status] = "fixed-version: The issue is fixed in v1.8.2"
CVE_STATUS_FIXED_ALREADY = "CVE-2026-33948 CVE-2026-39979 CVE-2026-40164 CVE-2026-44777"