From c6ebe16f34df84561466f435a5f4f4c40c9208bf Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 31 May 2026 15:43:42 +0200 Subject: [PATCH] package/sshfs: security bump version to 3.7.6 https://github.com/libfuse/sshfs/blob/sshfs-3.7.6/ChangeLog.rst Fixes CVE-2026-47187 & CVE-2026-48711. Switched to sha256 tarball hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni --- package/sshfs/sshfs.hash | 5 +++-- package/sshfs/sshfs.mk | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/package/sshfs/sshfs.hash b/package/sshfs/sshfs.hash index 9372e471c2..57698aeace 100644 --- a/package/sshfs/sshfs.hash +++ b/package/sshfs/sshfs.hash @@ -1,3 +1,4 @@ -# Locally calculated after checking pgp signature -sha256 5218ce7bdd2ce0a34137a0d7798e0f6d09f0e6d21b1e98ee730a18b0699c2e99 sshfs-3.7.3.tar.xz +# From https://github.com/libfuse/sshfs/releases/tag/sshfs-3.7.6 +sha256 6a1bcb31450a077e9cb1b7ff158c71de34db697c3c0da6cb362502131e495893 sshfs-3.7.6.tar.xz +# Locally calculated sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING diff --git a/package/sshfs/sshfs.mk b/package/sshfs/sshfs.mk index 61f11af55f..8557b98353 100644 --- a/package/sshfs/sshfs.mk +++ b/package/sshfs/sshfs.mk @@ -4,7 +4,7 @@ # ################################################################################ -SSHFS_VERSION = 3.7.3 +SSHFS_VERSION = 3.7.6 SSHFS_SOURCE = sshfs-$(SSHFS_VERSION).tar.xz SSHFS_SITE = https://github.com/libfuse/sshfs/releases/download/sshfs-$(SSHFS_VERSION) SSHFS_LICENSE = GPL-2.0