mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
Fixes the following vulnerability:
- CVE-2025-63938:
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in
the strip_return_port() function within src/reqs.c.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2025-63938
- 3c0fde9498
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
18 lines
586 B
Makefile
18 lines
586 B
Makefile
################################################################################
|
|
#
|
|
# tinyproxy
|
|
#
|
|
################################################################################
|
|
|
|
TINYPROXY_VERSION = 1.11.2
|
|
TINYPROXY_SITE = https://github.com/tinyproxy/tinyproxy/releases/download/$(TINYPROXY_VERSION)
|
|
TINYPROXY_SOURCE = tinyproxy-$(TINYPROXY_VERSION).tar.xz
|
|
TINYPROXY_LICENSE = GPL-2.0+
|
|
TINYPROXY_LICENSE_FILES = COPYING
|
|
TINYPROXY_CPE_ID_VALID = YES
|
|
|
|
# 0001-reqs-fix-integer-overflow-in-port-number-processing.patch
|
|
TINYPROXY_IGNORE_CVES += CVE-2025-63938
|
|
|
|
$(eval $(autotools-package))
|