package/liburiparser: security bump to version 1.0.1

Fixes the following vulnerability:

CVE-2026-42371: integer overflow in text range comparison
https://github.com/uriparser/uriparser/pull/298

For details, see the announcement:
https://www.openwall.com/lists/oss-security/2026/04/27/2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Peter Korsgaard
2026-04-27 17:37:30 +02:00
committed by Julien Olivain
parent c409050184
commit a8e7f79241
2 changed files with 3 additions and 3 deletions

View File

@@ -1,4 +1,4 @@
# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.0
sha256 154a3f649d80a78d5095fc461ec032ffb45f5ed3619edec923ac68cff29a088d uriparser-1.0.0.tar.xz
# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.1
sha256 acd18cfb14d1851705f863f7a625be693fb3971fb85d4996faa21147f0315fcb uriparser-1.0.1.tar.xz
# Locally calculated
sha256 287f09e6546a9610f949f89e8fb937cacfeabd7bfaa8c8a0c18312193bf04ad3 COPYING.BSD-3-Clause

View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBURIPARSER_VERSION = 1.0.0
LIBURIPARSER_VERSION = 1.0.1
LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.xz
LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION)
LIBURIPARSER_LICENSE = BSD-3-Clause