Re: [Buildroot] [PATCH 1/1] package/libass: security bump version to 0.17.5

Thomas Perale via buildroot <[email protected]> Fri, 31 Jul 2026 14:22:04 +0200
Newsgroups net.busybox.buildroot
Message-ID <[email protected]>
In reply of:
> https://github.com/libass/libass/releases/tag/0.17.5
> 
> Fixes CVE-2026-61626 & CVE-2026-61627.
> 
> Switched to sha256 tarball hash provided by upstream.
> 
> Signed-off-by: Bernd Kuhls <[email protected]>

Applied to 2025.02.x & 2026.05.x. Thanks

> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/9ccb7989abf5ef6cc74c643bcd8aedf81bdc1c50
> 
>  package/libass/libass.hash | 3 ++-
>  package/libass/libass.mk   | 2 +-
>  2 files changed, 3 insertions(+), 2 deletions(-)
> 
> diff --git a/package/libass/libass.hash b/package/libass/libass.hash
> index 2f4f718813..467c9b3816 100644
> --- a/package/libass/libass.hash
> +++ b/package/libass/libass.hash
> @@ -1,3 +1,4 @@
> +# From https://github.com/libass/libass/releases/tag/0.17.5
> +sha256  2dca25c0e0c837ddf00b52011b3f82cac1e4ddd3ad018227806b0c2288864acc  libass-0.17.5.tar.xz
>  # Locally computed
> -sha256  78f1179b838d025e9c26e8fef33f8092f65611444ffa1bfc0cfac6a33511a05a  libass-0.17.4.tar.xz
>  sha256  f7e30699d02798351e7f839e3d3bfeb29ce65e44efa7735c225464c4fd7dfe9c  COPYING
> diff --git a/package/libass/libass.mk b/package/libass/libass.mk
> index ff42c6d621..3675a75f93 100644
> --- a/package/libass/libass.mk
> +++ b/package/libass/libass.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -LIBASS_VERSION = 0.17.4
> +LIBASS_VERSION = 0.17.5
>  LIBASS_SOURCE = libass-$(LIBASS_VERSION).tar.xz
>  # Do not use the github helper here, the generated tarball is *NOT*
>  # the same as the one uploaded by upstream for the release.
> -- 
> 2.47.3
> 
> _______________________________________________
> buildroot mailing list
> [email protected]
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot