From 1a229c54b87697b5b56aeb1395d57bdcba6de58d Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 25 Jul 2025 20:27:43 +0200 Subject: [PATCH] package/rust-bindgen: security bump version to 0.72.0 Changelog, since version 0.65.1: https://github.com/rust-lang/rust-bindgen/blob/v0.72.0/CHANGELOG.md#0720-2025-06-08 The package updated some of its dependencies to fix security issues: Version 0.70.0 updates "tempfile" and "rustix" to fix: https://github.com/advisories/GHSA-c827-hfw6-qwvm https://www.cve.org/CVERecord?id=CVE-2024-43806 Version 0.69.3 updates shlex to fix: https://rustsec.org/advisories/RUSTSEC-2024-0006.html Signed-off-by: Bernd Kuhls [Julien: - use version tag for change log url - mark the update as security related - add link to fixed rustix CVE ] Signed-off-by: Julien Olivain --- package/rust-bindgen/rust-bindgen.hash | 2 +- package/rust-bindgen/rust-bindgen.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/rust-bindgen/rust-bindgen.hash b/package/rust-bindgen/rust-bindgen.hash index 0718bdc696..dc79a62ddd 100644 --- a/package/rust-bindgen/rust-bindgen.hash +++ b/package/rust-bindgen/rust-bindgen.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 20d32e8e182ef49694a65a4a18d624cac7caa30b03422212d503a7edc0d04f6a rust-bindgen-0.65.1-cargo4.tar.gz +sha256 f131b9cf87ea0a5db33ff3ad711aec4dbc4d383536f5f2e37493d63cbe95428e rust-bindgen-0.72.0-cargo4.tar.gz sha256 c23953d9deb0a3312dbeaf6c128a657f3591acee45067612fa68405eaa4525db LICENSE diff --git a/package/rust-bindgen/rust-bindgen.mk b/package/rust-bindgen/rust-bindgen.mk index aa0d7d44a4..349d4c3670 100644 --- a/package/rust-bindgen/rust-bindgen.mk +++ b/package/rust-bindgen/rust-bindgen.mk @@ -4,7 +4,7 @@ # ################################################################################ -RUST_BINDGEN_VERSION = 0.65.1 +RUST_BINDGEN_VERSION = 0.72.0 RUST_BINDGEN_SITE = $(call github,rust-lang,rust-bindgen,v$(RUST_BINDGEN_VERSION)) RUST_BINDGEN_LICENSE = BSD-3-clause RUST_BINDGEN_LICENSE_FILES = LICENSE