From cec032245a9edd15538c31eae261db8168896eb8 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 20 Apr 2026 19:34:11 +0200 Subject: [PATCH] package/p11-kit: security bump version to 0.26.2 https://github.com/p11-glue/p11-kit/blob/0.26.2/NEWS Fixes CVE-2026-2100: https://github.com/advisories/GHSA-hq85-3f6c-jx84 Switched to sha256 tarball hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit a5366d13ba67d297440ad28a1651cf9bb037c303) Signed-off-by: Thomas Perale --- package/p11-kit/p11-kit.hash | 4 ++-- package/p11-kit/p11-kit.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/p11-kit/p11-kit.hash b/package/p11-kit/p11-kit.hash index 43a566a82c..943ad9c22f 100644 --- a/package/p11-kit/p11-kit.hash +++ b/package/p11-kit/p11-kit.hash @@ -1,4 +1,4 @@ -# Locally calculated after checking pgp signature -sha256 04d0a86450cdb1be018f26af6699857171a188ac6d5b8c90786a60854e1198e5 p11-kit-0.25.5.tar.xz +# From https://github.com/p11-glue/p11-kit/releases/tag/0.26.2 +sha256 09fd9f44da4813a3141e73d5e7cf7008e5660d0405f13d56c15e1da9dcecf828 p11-kit-0.26.2.tar.xz # Locally computed sha256 2e1ba993904df807a10c3eda1e5c272338edc35674b679773a8b3ad460731054 COPYING diff --git a/package/p11-kit/p11-kit.mk b/package/p11-kit/p11-kit.mk index 154a34e634..e8a8560ff9 100644 --- a/package/p11-kit/p11-kit.mk +++ b/package/p11-kit/p11-kit.mk @@ -4,7 +4,7 @@ # ################################################################################ -P11_KIT_VERSION = 0.25.5 +P11_KIT_VERSION = 0.26.2 P11_KIT_SOURCE = p11-kit-$(P11_KIT_VERSION).tar.xz P11_KIT_SITE = https://github.com/p11-glue/p11-kit/releases/download/$(P11_KIT_VERSION) P11_KIT_INSTALL_STAGING = YES