Skip to content

[pull] master from buildroot:master#1075

Merged
pull[bot] merged 3 commits into
mir-one:masterfrom
buildroot:master
Jul 2, 2026
Merged

[pull] master from buildroot:master#1075
pull[bot] merged 3 commits into
mir-one:masterfrom
buildroot:master

Conversation

@pull

@pull pull Bot commented Jul 2, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

shenki and others added 3 commits July 2, 2026 08:29
v1.8 release notes:

  https://github.com/riscv-software-src/opensbi/releases/tag/v1.8
  https://github.com/riscv-software-src/opensbi/releases/tag/v1.8.1

Signed-off-by: Joel Stanley <jms@oss.tenstorrent.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fixes the following vulnerabilities by importing upstream patches:

- CVE-2026-39979: jqlang/jq@2f09060

- CVE-2026-33948: jqlang/jq@6374ae0

- CVE-2026-33947: jqlang/jq@fb59f14

- CVE-2026-32316: jqlang/jq@e47e56d

- CVE-2026-40164: jqlang/jq@0c7d133

- CVE-2026-40612: jqlang/jq@d1a1256

- CVE-2026-41256: jqlang/jq@5a015de

- CVE-2026-41257: jqlang/jq@01b3cde

- CVE-2026-43894: jqlang/jq@9761ceb

- CVE-2026-43895: jqlang/jq@9d223f1

- CVE-2026-43896: jqlang/jq@532ccea

- CVE-2026-44777: jqlang/jq@f58787c

- CVE-2026-47770: jqlang/jq@7122866

- CVE-2026-49839: jqlang/jq@e987df0

- CVE-2026-54679: jqlang/jq@46d1da3

Tests were stripped out of the patches.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
For more information about the release, see:
 - https://github.com/jqlang/jq/releases/tag/jq-1.8.2

All the CVEs were addressed by a patch but non-CVEs security fixes such
as GHSA-gf4g-95wj-4q4r or GHSA-hj52-j2c9-r8r4 are fixed by this release.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
@pull pull Bot locked and limited conversation to collaborators Jul 2, 2026
@pull pull Bot added the ⤵️ pull label Jul 2, 2026
@pull pull Bot merged commit d67a214 into mir-one:master Jul 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants