Skip to content

Update libusb to 1.0.30#393

Open
gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
mainfrom
update-libusb-1.0.30
Open

Update libusb to 1.0.30#393
gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
mainfrom
update-libusb-1.0.30

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update libusb 1.0.291.0.30

Source: github:libusb/libusb
Release: https://github.com/libusb/libusb/releases/tag/v1.0.30
Changelog: libusb/libusb@v1.0.29...v1.0.30
Released: 56 days ago (2026-05-17)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 1.0.30 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 2 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (2)

This update clears 2 vulnerabilities affecting 1.0.29:

CVE / GHSA Severity Fixed in
CVE-2026-23679 MEDIUM 1.0.30
CVE-2026-47104 MEDIUM 1.0.30

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ libusb 1.0.29 1.0.30
~ libusb-upstream 1.0.29 1.0.30

Changes

Old New
Version 1.0.29 1.0.30
SHA256 5977fc950f8d1395... fea36f34f9156400...
Size 656 KB
Source https://github.com/libusb/libusb/releases/download/v1.0.29/libusb-1.0.29.tar.bz2 https://github.com/libusb/libusb/releases/download/v1.0.30/libusb-1.0.30.tar.bz2
  • License: LGPL-2.1-only (source: GitHub + tarball)

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Jul 13, 2026
@bryan-minimal bryan-minimal marked this pull request as ready for review July 13, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants