From 3ef90e752b4c3eb35c2715bde8750cb9ed3005fb Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 29 Dec 2025 09:14:35 +0100 Subject: [PATCH] package/liburiparser: security bump version to 1.0.0 https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog Added sha256 hash provided by upstream. Fixes CVE-2025-67899. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/liburiparser/liburiparser.hash | 3 ++- package/liburiparser/liburiparser.mk | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/package/liburiparser/liburiparser.hash b/package/liburiparser/liburiparser.hash index bed9c8ee9b..f8d7124b7f 100644 --- a/package/liburiparser/liburiparser.hash +++ b/package/liburiparser/liburiparser.hash @@ -1,3 +1,4 @@ +# From https://github.com/uriparser/uriparser/releases/tag/uriparser-1.0.0 +sha256 154a3f649d80a78d5095fc461ec032ffb45f5ed3619edec923ac68cff29a088d uriparser-1.0.0.tar.xz # Locally calculated -sha256 85645df1bb220a3867c42f8adeba4f6a4b2fdc1563e91ad7d9f92d14d3dd377d uriparser-0.9.9.tar.xz sha256 287f09e6546a9610f949f89e8fb937cacfeabd7bfaa8c8a0c18312193bf04ad3 COPYING.BSD-3-Clause diff --git a/package/liburiparser/liburiparser.mk b/package/liburiparser/liburiparser.mk index 66ec72409c..731739e582 100644 --- a/package/liburiparser/liburiparser.mk +++ b/package/liburiparser/liburiparser.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBURIPARSER_VERSION = 0.9.9 +LIBURIPARSER_VERSION = 1.0.0 LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.xz LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION) LIBURIPARSER_LICENSE = BSD-3-Clause