Files
buildroot/package/tinyproxy/tinyproxy.mk
Thomas Perale be07b5766a package/tinyproxy: add patch for CVE-2025-63938
Fixes the following vulnerability:

- CVE-2025-63938:
    Tinyproxy through 1.11.2 contains an integer overflow vulnerability in
    the strip_return_port() function within src/reqs.c.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-63938
  - 3c0fde9498

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-26 21:10:26 +01:00

18 lines
586 B
Makefile

################################################################################
#
# tinyproxy
#
################################################################################
TINYPROXY_VERSION = 1.11.2
TINYPROXY_SITE = https://github.com/tinyproxy/tinyproxy/releases/download/$(TINYPROXY_VERSION)
TINYPROXY_SOURCE = tinyproxy-$(TINYPROXY_VERSION).tar.xz
TINYPROXY_LICENSE = GPL-2.0+
TINYPROXY_LICENSE_FILES = COPYING
TINYPROXY_CPE_ID_VALID = YES
# 0001-reqs-fix-integer-overflow-in-port-number-processing.patch
TINYPROXY_IGNORE_CVES += CVE-2025-63938
$(eval $(autotools-package))