jq: Fix CVEs

Adds backported patches to fix CVE-2024-23339, CVE-2024-53427, and
CVE-2025-48060.

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Change-Id: Ibc2db956b7fd5d0388dbed1a81ddf9aa58431fb1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Colin McAllister
2025-07-07 16:39:43 -05:00
committed by Armin Kuster
parent f73c3e4b77
commit 9daee866d1
5 changed files with 397 additions and 1 deletions
+7 -1
View File
@@ -9,7 +9,13 @@ LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://COPYING;md5=2814b59e00e7918c864fa3b6bbe049b4"
PV = "1.6+git${SRCPV}"
SRC_URI = "git://github.com/stedolan/jq;protocol=https;branch=master"
SRC_URI = " \
git://github.com/stedolan/jq;protocol=https;branch=master \
file://CVE-2024-23337.patch \
file://CVE-2025-48060.patch \
file://CVE-2024-53427-01.patch \
file://CVE-2024-53427-02.patch \
"
SRCREV = "a9f97e9e61a910a374a5d768244e8ad63f407d3e"
S = "${WORKDIR}/git"