From a8e7f79241999245710963f42a4bcb4524ebeff7 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Mon, 27 Apr 2026 17:37:30 +0200 Subject: [PATCH] package/liburiparser: security bump to version 1.0.1 Fixes the following vulnerability: CVE-2026-42371: integer overflow in text range comparison https://github.com/uriparser/uriparser/pull/298 For details, see the announcement: https://www.openwall.com/lists/oss-security/2026/04/27/2 Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/liburiparser/liburiparser.hash | 4 ++-- package/liburiparser/liburiparser.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/liburiparser/liburiparser.hash b/package/liburiparser/liburiparser.hash index f8d7124b7f..c18df8eb98 100644 --- a/package/liburiparser/liburiparser.hash +++ b/package/liburiparser/liburiparser.hash @@ -1,4 +1,4 @@ -# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.0 -sha256 154a3f649d80a78d5095fc461ec032ffb45f5ed3619edec923ac68cff29a088d uriparser-1.0.0.tar.xz +# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.1 +sha256 acd18cfb14d1851705f863f7a625be693fb3971fb85d4996faa21147f0315fcb uriparser-1.0.1.tar.xz # Locally calculated sha256 287f09e6546a9610f949f89e8fb937cacfeabd7bfaa8c8a0c18312193bf04ad3 COPYING.BSD-3-Clause diff --git a/package/liburiparser/liburiparser.mk b/package/liburiparser/liburiparser.mk index 731739e582..d8dcc22063 100644 --- a/package/liburiparser/liburiparser.mk +++ b/package/liburiparser/liburiparser.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBURIPARSER_VERSION = 1.0.0 +LIBURIPARSER_VERSION = 1.0.1 LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.xz LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION) LIBURIPARSER_LICENSE = BSD-3-Clause