From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Feb 2026 19:18:42 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vqxkX-001Kvs-1H for lore@lore.pengutronix.de; Fri, 13 Feb 2026 19:18:42 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vqxkY-000297-3d; Fri, 13 Feb 2026 19:18:42 +0100 Received: from mail-francecentralazon11023135.outbound.protection.outlook.com ([40.107.162.135] helo=PA4PR04CU001.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vqxkS-00028x-AH for ptxdist@pengutronix.de; Fri, 13 Feb 2026 19:18:36 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bBim/SJI0pjLCCkaZxOfyYj2ftD29JS34GYrmE+IDbehHCX9H1EZ4i8TxMi2flunEd/hIi/5joloCXxpHKewa0sRA87XVwsJaGQR3ZrRev34Pb4mP2+RY924NAEb2jVvw8hMhLzGrN1EgkfFWgESa/O8UivC4AvjNSsOWJC31ph2THI3rr1nOCS7EW5LkNMP44jct8mpSx5mwQLTuljUzd3/fgGXBBTA1HEkO+8pg8sZaW3rrJ2++D3o9M+qKvZY2bLi3JI2IJ9y7HugdCi72u00/Cmdptp2ULtpYEIh2AlUFchaGWlXvl5lHd3xMSpKkhWb6WTteLjt+qKh6CAh2Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=IWhxpdQxL/o0HKdRgiNoTekX+/6HlXXh01mlP8U4uh0=; b=X3awK/aA5CQbzUwlWbVQVuEZuHcKAfsYj+ewzRtxL6P8jbjG2EJa/2sn5mwUBnVHaEmg9G324V76TH0yrNn9GF2Sh6x88JDdOb9K/nj7psRs93tqNXFVn8VMlc+wTCG3J7f4RyBVYQBeFP7zo0p7GkVBc4ty6msagmBzHvJ/xy1v1HQQRdXPV6Vkk+zUjVPFscvLvPEbnXnMV1CKdXqkv/jaIoGw1VM0cfMk9UsvzLB6daZ4fqXfCOXaGyRYUTetarhlU+Y6MdH3qQTF1p6a5TfcsvUHcIrUcHaawa9pNYOK+3zHMJOcVsKBgDNI2wq/HntYujGTlvTFZl2rPztzrw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IWhxpdQxL/o0HKdRgiNoTekX+/6HlXXh01mlP8U4uh0=; b=JhGWi/sCdjVbSfyJpTwjego4axCu7vnvfQPYNV0MC83in1flE/lqEsZN7FHzSgXlKcdwkhI4YsZ5bMz95VVDGgKmf58pECPyvCyjbfw70foSXtEb6RC4QuIrQJYq/sXB1nt0KihyuSN3DkU9IPspKbD3HNHlXSUT+iz9xxiLwu0= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS4P251MB0710.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:4be::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.13; Fri, 13 Feb 2026 18:18:34 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.9587.017; Fri, 13 Feb 2026 18:18:33 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 13 Feb 2026 19:18:27 +0100 Message-ID: <20260213181827.1384662-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV2PEPF00006637.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:401::3d4) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AS4P251MB0710:EE_ X-MS-Office365-Filtering-Correlation-Id: 0c68e69d-b0ef-49f1-6b96-08de6b2c4c1e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|52116014|376014|1800799024|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?GBIobe+KJhvDka1+1W+dJeFJefPopoSWpNWJ3SjE3LohiX4vHfCJ6q7ZZuE9?= =?us-ascii?Q?UXGO0eA7K8lQVoZsqsDNewHDU21c9fsGWVurxWfsF+Gk/mWfW5z48xNcXI2C?= =?us-ascii?Q?XKLvhjF1qIdIjjJybl944N4VFfrsT6xDc1MyQaXXqXKtRFA5pYa+vHE9Em06?= =?us-ascii?Q?cF5dyoUX8XrV455E9/Y6gnkJN1tZGIUYzdKJys+8/4BegmeZKcqfvrr2Zvhv?= =?us-ascii?Q?HlcILokOrtPozxGVvZcmNWDAVeosg2A5NkBKjrzAHNV1QlaVm9vr3g03Wjvp?= =?us-ascii?Q?YEwRQ1D8MjPs/3UnQmGIwKoh0oykaI3tDiPuh4WTyEY5u3WEKYAEAWla5pAE?= =?us-ascii?Q?//suzlnFuna084MNQ31LUwk0EPx8lVjg/hXg+dS6fgQGEyhnfr201MLbkGwK?= =?us-ascii?Q?0j/Mk6uaS7EgEMy8457l8JVQf8KeuMWAa/Yp5gTwu9iUeHvlnKD9ksFrmwmB?= =?us-ascii?Q?Mo4DGDcOzQM5MsPsNtVxjxdIRm1n3VdiOxmt7G2Z1OfyDf0Phy3vZeTLcFoP?= =?us-ascii?Q?PiTKVAcqFjc+qlZ0wiFPpMcarTDfSv+R0VjcH2AfiA2cQtE1H7Nc3vY0JXup?= =?us-ascii?Q?A4TtKWzL9ZkAdHEoIu6pwEM2UBc0RHOjZQbMCWKXJsnTUkpVnXDolK5c4Mr9?= =?us-ascii?Q?JRLuSbVuwLgvcl7uYOJdLFYUfPFNxzXjTII7J0vElYaJiwd5tJQRJYejyXEH?= =?us-ascii?Q?sYOeLOK40I6t2ZN55CaPoO/P9gxhGcQfXxAIS7CzHEtUb/F0QyuV/e7rskQZ?= =?us-ascii?Q?CG35AG29gAfCGelrSihNGRJewbc4ZKHA7rec98dh6Lt7goht8dChXMYw5BK5?= =?us-ascii?Q?dFc3BBTTmpKos8paLs/x8LX0dpVQ8jHlfgWl8wkPNNsEq5YagWl2RyDd0TTD?= =?us-ascii?Q?LxhYPnoqI9i38tMkpukDRJgDR4mggiOW0CPRnFro4XjoTnXuvY+jlo3dEpV+?= =?us-ascii?Q?jK4aMKgrSozV3Ys/O830HGSD5W4F3jpfvmFxK8cfZsmaEHwd5wQG4gL71TNV?= =?us-ascii?Q?oNdPT4aw8XSDNxjDSbrONAiuxMuUuGq4THUGN0uZPojFmOFibGnShzkXNybZ?= =?us-ascii?Q?+1afuJtD7Obmx++6Yze6hqo9R6BGpSpUT5H1iv0ffJ6PoaAb9gB/yqmgG8il?= =?us-ascii?Q?HQJ7v//Pxj2ijeXodxWJygdW7Y73vg9HoVugB9+fx7Fq/4veGD5dSADV4B0N?= =?us-ascii?Q?SxO1sivPWsJyJKaOmSkW04HOVCZtB7LLvBjGEy4MaRv5F/ikqUbaqfuWCdGC?= =?us-ascii?Q?eZP186quDKNV504mli7Dup3khdc7g+cqEWmNK/+DGC8TI6noma6+uJsQjmVT?= =?us-ascii?Q?GH3aq0ti3HFR2KY8VIE3mTiX0iAJaRi6PXh1Y7ARfN/cK6/j7mzzFTl2Xhht?= =?us-ascii?Q?JNwxvGIjZRMTX8zy7rR+Lo+KbZQ7IIhZFYU6VJFoE1tG6qJeSVwaIQ7I6Dlm?= =?us-ascii?Q?IWoyyuYLBowSqo3BBjqM5uhQoLLtcWru7eCbg5ImsbBD4DKIEfG0z1J4JBQr?= =?us-ascii?Q?RNLvKsb8nkJ/7/scQ81hhXnP4svaqDdIl30CzljmsIDbOJ6ngwrBHteuAI6a?= =?us-ascii?Q?pSQdM3TAo5AF8zIhY0VuMLBYTC6/wvlDyUOK8yMy/HB/b9G0rzh/jIyGI1Oh?= =?us-ascii?Q?fID0JBybF3dLBRoW+d965HY=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(52116014)(376014)(1800799024)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?pjwDY+t26Qfy0ld+nP8hhvOX74eXZtflYcv6FEk7M81eM77y1Iy2vZMeulH8?= =?us-ascii?Q?r7D6GKtqWO/cFgZSSkbrtUvlxvYSKiDnGt/W2y9dUNecfL3WX9CwUqusIKvP?= =?us-ascii?Q?MdBRp5VAlo0Ll+eymZGhWy3BnsLApbMnLl94fF0cZQ9Ij0U+IumhTera40ev?= =?us-ascii?Q?vVXeuVKp9uEsbLwcZ6r851c/kk3LwI/k/W1coZCY3m3h8DLOcC37k1vhx/ot?= =?us-ascii?Q?nZuAeK1LHJFmJ3EOgFlqCU9E9kt86pyEhdTdzyUZEifgIfmodsBRnilkgitS?= =?us-ascii?Q?d9YZn7/HBEus3ifI2XKfDkipvuM+zvwmSaYN/LKnjgT3WRCz5CTYqP2z082N?= =?us-ascii?Q?VfQd+NNdVpK/vaHZ3H5YDF6Ut0OSz3Vea2Uk+99Mjei68irGAXC67nIOVojj?= =?us-ascii?Q?5z/Rxn2lRI0m9OlrAnKJIwv8Hqf7QosG++nMN1i69h3d/Mv23r91AcNnDG3w?= =?us-ascii?Q?L9BwjjXSHwYGizWEQvdEk+7UuwIMAAQg171IvKjTy4bOjOp7BUmawUacgPy0?= =?us-ascii?Q?9snqqCD4dAEXF45v5fVAqK/ImCKWdmxOmUYq5YRJp+fVqx2f2gPz3Rf66FXW?= =?us-ascii?Q?2Hkm4RdQDShibo2OJaxPMIKw8jBy2nDby1Fg2dmwCbdJ5+YzNmcEDOJEcWS2?= =?us-ascii?Q?AnE+Qk/bZV9TsU5INWzpfS2LKtglME7fKH7fX5PO61qYAJJz5d5L9kT7EVwR?= =?us-ascii?Q?FApEHOJuZ86aO5UeTFge0B0khbN6VQPdfuq+6Q5l5rBgQrMtZO7GB4Ihn2PM?= =?us-ascii?Q?zBpvYyX8xyQcKhAubFz76I3ABwjsjROHbyE1XYwYJ9EUtliuW6SIi/37lwrS?= =?us-ascii?Q?H8oASVH4Oz5eBbaRc+xtZ1/cI8nM6LDgyHMb7bi3q6GoHwyRDJmIWK37OGaD?= =?us-ascii?Q?I+02doIB1lUyT48mLW0C7x0LUvzZNd16+oYJRrUOwnFaeJL0Ujcp31s+dYsB?= =?us-ascii?Q?9DWLDilZSoPTKvt6CfKDCG9y+h0o58OCqm54/AitAtvFEF/skSIt8iDvuQ1w?= =?us-ascii?Q?Vg1XZL4mq6GVazFRegTt9VohYxsGR4eDOqUN01UtK3P+FP1vcZFrIg7eNsoY?= =?us-ascii?Q?UgKB+aMtPhnTak3qsvxNUYpGiHhnahbHqei6D8cVv3vPP5x97lEwL3sRAi9d?= =?us-ascii?Q?us/TZMF9u8hlw3+8tOSyIIJuUevkftNoitnL8YgViKve10Ogi8AufUGDPlUK?= =?us-ascii?Q?k35Mkwxs4bG9I2Elzr9ovaPnBdibkN01MV3jlVd/sL/9z7SW88iO5m28Nu5X?= =?us-ascii?Q?HaCzprZgmlyq7Bm8Lzw2L+EUJ/zomUko0PGbEDy0RMwZ/Do8KWZXml8ar3o0?= =?us-ascii?Q?+MtW9UQFYEjkd0OWqInI4QTtzgM6bqDrjqW0wWqgMk5Fu3vUtW5pDtY30s6M?= =?us-ascii?Q?hvZXCfzsWHCnFx1jRzaQo7ACUp1Yg/ipwKHEaJo4G3FAcjWoaCOLG+0OQNxy?= =?us-ascii?Q?dg/9kguysiqdxtIBYrGOr3/FHOAX4/uxKKyH822tQF6Ax5hZsWM/GiqjMdvp?= =?us-ascii?Q?GTnRqv6fx7n4A0npiPVef0YyGKQjuPrm8iqWRQlV647poX+9Ex7yoT3WTYhW?= =?us-ascii?Q?OYMuyHcmvcdszfVSccCG8M8Xny14h+mwWSk52EgT+qO16kdKMj2aK8YCWUzw?= =?us-ascii?Q?1+U/W95dOI7VAq/rUvJr8gce7lO/Y7xyXlyEIQvfTQt5lkuQwJLCNCnnZGEG?= =?us-ascii?Q?PXWW5dwVrgD4PobsJj2YvwIqk69J4124agjAEgaZpf40VhmkGVJiH2sgFXkJ?= =?us-ascii?Q?sLoAACz11WtESJXJSdetI19B6PLuo/I=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0c68e69d-b0ef-49f1-6b96-08de6b2c4c1e X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2026 18:18:33.4485 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: EZfIlQwmYOlhva1wNWRgVBJ10Svx2VZSDiAQQbMOQHPSFgfnlZ3EYx6jhheLXgPN5fUUKDIm/IAh5I9uJ0tCvRXE0Q4vGYkQkhY8nic2lDI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4P251MB0710 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_MSPIKE_H2,RCVD_IN_VALIDITY_RPBL_BLOCKED, RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libpng: Version bump. 1.6.54 -> 1.6.55 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false High severity security fix. https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES Plugs CVE: CVE-2026-25646: Heap buffer overflow in png_set_quantize. Signed-off-by: Christian Melki --- rules/libpng.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libpng.make b/rules/libpng.make index f69de3e08..8cdfacf64 100644 --- a/rules/libpng.make +++ b/rules/libpng.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng # # Paths and names # -LIBPNG_VERSION := 1.6.54 -LIBPNG_MD5 := ba9e86853c794d111398b66a42bfa0dc +LIBPNG_VERSION := 1.6.55 +LIBPNG_MD5 := bc950b5a06ec1028285e14a127f6fb6e LIBPNG := libpng-$(LIBPNG_VERSION) LIBPNG_SUFFIX := tar.xz LIBPNG_URL := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX)) -- 2.43.0