From 99ea0fbb3db76057a77bbd618cfbd188c69a6f86 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 29 Sep 2026 20:21:24 +0200 Subject: [PATCH] package/pcre2: security bump to version 10.49 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 This is a security-only release, to address GHSA-r9hj-j2rw-4q3m: https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m Switched to sha256 tarball hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/pcre2/pcre2.hash | 5 ++--- package/pcre2/pcre2.mk | 2 +- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/package/pcre2/pcre2.hash b/package/pcre2/pcre2.hash index 90991322a2..3d75858727 100644 --- a/package/pcre2/pcre2.hash +++ b/package/pcre2/pcre2.hash @@ -1,6 +1,5 @@ -# Locally calculated after checking pgp signature: -# https://github.com/PCRE2Project/pcre2/releases/download/pcre2-10.48/pcre2-10.48.tar.bz2.sig -sha256 b6c68fdf6f3ac31388b50aa89ff0fc49c00c987c16e7b5146491d12003f2c8ed pcre2-10.48.tar.bz2 +# From https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 +sha256 53c156e1ba416a20da8e65395daa132da0d80e76910424caca3fcdae7831d384 pcre2-10.49.tar.bz2 # Locally computed sha256 197d8a73ffee0d6b09adba2f9c677b5f5aede24edf89258a68e48248d010d811 LICENCE.md sha256 5f216505c0f6ea3273caec89e766eef93cdeb7bbb0c429f9360116d7c938feeb deps/sljit/LICENSE diff --git a/package/pcre2/pcre2.mk b/package/pcre2/pcre2.mk index ea841f482e..a3e74e32b1 100644 --- a/package/pcre2/pcre2.mk +++ b/package/pcre2/pcre2.mk @@ -4,7 +4,7 @@ # ################################################################################ -PCRE2_VERSION = 10.48 +PCRE2_VERSION = 10.49 PCRE2_SITE = https://github.com/PCRE2Project/pcre2/releases/download/pcre2-$(PCRE2_VERSION) PCRE2_SOURCE = pcre2-$(PCRE2_VERSION).tar.bz2 PCRE2_LICENSE = BSD-3-Clause