From efcd4354e61ed0b7e94f6696e5a37df573aab0e7 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 17 Apr 2026 09:58:24 +0200 Subject: [PATCH] package/libmicrohttpd: security bump version to 1.0.5 https://lists.gnu.org/archive/html/libmicrohttpd/2026-04/msg00003.html Fixes CWE-444: https://cwe.mitre.org/data/definitions/444.html Version 1.0.4 contains a bug and was never officially announced: https://lists.gnu.org/archive/html/libmicrohttpd/2026-04/msg00002.html Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 712121326f84e2508ab161053c2b04e45511c79f) Signed-off-by: Thomas Perale --- package/libmicrohttpd/libmicrohttpd.hash | 2 +- package/libmicrohttpd/libmicrohttpd.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libmicrohttpd/libmicrohttpd.hash b/package/libmicrohttpd/libmicrohttpd.hash index bd5d0b3e8b..4dfe62deeb 100644 --- a/package/libmicrohttpd/libmicrohttpd.hash +++ b/package/libmicrohttpd/libmicrohttpd.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 7816b57aae199cf5c3645e8770e1be5f0a4dfafbcb24b3772173dc4ee634126a libmicrohttpd-1.0.3.tar.gz +sha256 b46d00f58efa6f497b97d2e782c4ee66301d412ddd855dd3068518b3a2cd3ea2 libmicrohttpd-1.0.5.tar.gz sha256 7399547209438c93f9b90297954698773d4846cea44cde5ca982c84c45952a3b COPYING diff --git a/package/libmicrohttpd/libmicrohttpd.mk b/package/libmicrohttpd/libmicrohttpd.mk index b74a7a1338..7a243b42cf 100644 --- a/package/libmicrohttpd/libmicrohttpd.mk +++ b/package/libmicrohttpd/libmicrohttpd.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBMICROHTTPD_VERSION = 1.0.3 +LIBMICROHTTPD_VERSION = 1.0.5 LIBMICROHTTPD_SITE = $(BR2_GNU_MIRROR)/libmicrohttpd LIBMICROHTTPD_LICENSE_FILES = COPYING LIBMICROHTTPD_CPE_ID_VENDOR = gnu