mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/liburiparser: security bump to version 1.0.1

Browse Source 
Fixes the following vulnerability:

CVE-2026-42371: integer overflow in text range comparison
https://github.com/uriparser/uriparser/pull/298

For details, see the announcement:
https://www.openwall.com/lists/oss-security/2026/04/27/2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a8e7f79241)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Peter Korsgaard
2026-04-27 17:37:30 +02:00
committed by Thomas Perale
parent 226f163aa0
commit 593c050f4d
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/liburiparser/liburiparser.hash
View File

@@ -1,4 +1,4 @@
# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.0
sha256 154a3f649d80a78d5095fc461ec032ffb45f5ed3619edec923ac68cff29a088d uriparser-1.0.0.tar.xz
# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.1
sha256 acd18cfb14d1851705f863f7a625be693fb3971fb85d4996faa21147f0315fcb uriparser-1.0.1.tar.xz
# Locally calculated
sha256 287f09e6546a9610f949f89e8fb937cacfeabd7bfaa8c8a0c18312193bf04ad3 COPYING.BSD-3-Clause

2
package/liburiparser/liburiparser.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBURIPARSER_VERSION = 1.0.0
LIBURIPARSER_VERSION = 1.0.1
LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.xz
LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION)
LIBURIPARSER_LICENSE = BSD-3-Clause