Commit Graph

11 Commits

Author SHA1 Message Date
Divya Chellam 6306bae883 jq: fix CVE-2025-9403
A vulnerability was determined in jqlang jq up to 1.6. Impacted is the
function run_jq_tests of the file jq_test.c of the component JSON Parser.
Executing manipulation can lead to reachable assertion. The attack
requires local access. The exploit has been publicly disclosed and may be
utilized. Other versions might be affected as well.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-9403

Upstream-patch:
https://github.com/jqlang/jq/commit/a4d9d540103ff9a262e304329c277ec89b27e5f9

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:59 +01:00
Colin McAllister 9daee866d1 jq: Fix CVEs
Adds backported patches to fix CVE-2024-23339, CVE-2024-53427, and
CVE-2025-48060.

Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com>
Change-Id: Ibc2db956b7fd5d0388dbed1a81ddf9aa58431fb1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-13 14:36:35 -04:00
Joerg Vehlow 2c051c65a4 jq: Fix typo OE_EXTRACONF -> EXTRA_OECONF
Signed-off-by: Joerg Vehlow <joerg.vehlow@aox.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1aa9d7d53d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-30 13:02:52 -07:00
William A. Kennington III 0d8dee9172 jq: upgrade 1.6 -> 2021-10-24 git
JQ has gone through more than 3 years of code changes and has had
significant performance improvements since the last release. The team is
still figuring out a new release process. Use the latest git commit to
pull in these changes.

Signed-off-by: William A. Kennington III <wak@google.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:28:51 -08:00
Pierre-Jean Texier c4fa664720 jq: fix upstream version check
Fixes:

INFO: Skip package jq (status = UNKNOWN_BROKEN, current version = 1.6, next version = N/A)

After this commit:

INFO: Skip package jq (status = MATCH, current version = 1.6, next version = 1.6)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Alex Kiernan 9ada8b1306 jq: update to 1.6
Drop backported patch as it's present in 1.6. Switch to autotools-brokensep
to avoid

| sed -e 's/\\/\\\\/g' -e 's/"/\\"/g' -e 's/^/"/' -e 's/$/\\n"/' ../jq-1.6/src/builtin.jq > src/builtin.inc
| /bin/sh: src/builtin.inc: No such file or directory

License-Update: whitespace changes
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30 13:34:49 -08:00
Andre McCurdy 8b68ed985b jq: add support for jq-native + misc minor fixes
- Add PACKAGECONFIG options for docs, maintainer-mode and oniguruma

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-10-05 18:21:13 +02:00
Martin Jansa 4158dd4994 jq: add dependency on onig
* configure doesn't have config option ot disable it and it's autodetected from sysroot
  causing:
  WARN: jq: jq rdepends on onig, but it isn't a build dependency?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-03-25 11:27:30 +01:00
Derek Straka 19a3f18e1e jq: upgrade to 1.5
update source url and checksums
license checksum update since trailing whitespace removed upstream
disable-maintainer-mode to avoid bison > 3.0 dependency

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-01-27 12:43:56 +01:00
Matthieu CRAPET 31577e783a jq: upgrade to 1.4
Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:46 +02:00
Matthieu CRAPET 6f0a4b9471 jq: add new recipe for version 1.3
jq is like sed but for JSON data. It's a very useful tool with no dependency.

Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-15 12:30:20 +02:00