From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 10 Apr 2026 19:19:55 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wBFWN-00Aii1-0T for lore@lore.pengutronix.de; Fri, 10 Apr 2026 19:19:55 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wBFWN-0000VB-1P; Fri, 10 Apr 2026 19:19:55 +0200 Received: from mail-northeuropeazlp170110003.outbound.protection.outlook.com ([2a01:111:f403:c200::3] helo=DU2PR03CU002.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1wBFVy-0000UU-5N for ptxdist@pengutronix.de; Fri, 10 Apr 2026 19:19:31 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Pe1yry5Nd/q8VCCPNIZW7E0RiJK5ue1Fw4PF44mpBelEAElTQbf2ldBBg/mrhvTaoCsWWfsm8ylpCc1FqXIn1r5rJTdO7Ote0kc5JtT57I+F0zPrbfYazu8ab0DTVGSEtexH1o/C6l0+M00BcQwDA5btHC+9TAhcvI1Doxni4LoJReJPU4ba3115TwQsTV8xuqU3h4y/iKdxqsGqHVL5d82mfcy1nGthmrJWjXtDufpnuG7lvd1KswiqjE7iT1jPb7QXXJnwW4IQOzP3uN+RizwSV68HTbYtHfTGFpWkkEdXyzU8ToOVoox7VzKyAy0yBpd9QilrB5n2AXpGXy9rMw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bmlQ/EUqrzqF4m3/daaIQb7amMyBCpdugPJeEH5CWCM=; b=cUrLdG7StjdPq94KNiPgoVfgOgkALPUEwyi7bqZLcclnpaJGOX+p5xT69CAnfmVmrnSKAyuXlLp1l0r0u3dbzENqdFzxbOJnCJ9WA10tZSyDGtdCBcqXfUddoF9E7VKxiaiwl+PaDuN2Ns6YXvMXrKwAZBAPDx5bR57qjWatSzfD0BXcSQERILd82svtUAWor7EiKZxIsnVQRCpVliw4LFEJ0A8MIgXbAMTA1QhVGtszeyKd+h1vZGHrtNrnPRVKyAbDqlpfaDxxx+9bqST2ljFPPwpSNM6X9YrOBC12wILJYNnp5h+P/K6prwqNitsq2baqImnWNf5UqcybZlU39Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bmlQ/EUqrzqF4m3/daaIQb7amMyBCpdugPJeEH5CWCM=; b=HHquiQco1RIT8CcxKfpEfLfBw9sLvZ9uelp9UeFTdvswezKbF+ocairmBFfRAC/MOIVk3Mpx9oLszD2dpKO2hTn2ltrgd2McHVcuZHDVY0sK5j0X9zJbAty3Ec7D3mNT67wrcIdn4TtgNcKSOQxhjT+f5fT8ZtUSjLigBbRHWhE= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by GV1P251MB0930.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:9e::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.17; Fri, 10 Apr 2026 17:19:26 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%4]) with mapi id 15.20.9769.016; Fri, 10 Apr 2026 17:19:26 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 10 Apr 2026 19:19:19 +0200 Message-ID: <20260410171919.1021459-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3PEPF0001DC31.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:400::10d) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|GV1P251MB0930:EE_ X-MS-Office365-Filtering-Correlation-Id: 07144ac8-c9fb-4f8f-8c30-08de97255100 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|52116014|376014|366016|38350700014|56012099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(52116014)(376014)(366016)(38350700014)(56012099003)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?gG+MsUhbHIG6uxv+Mo7CPCLgN9aw38L7qDNmxMWPe+8yUPzH8vMXDosYEHZw?= =?us-ascii?Q?+iHOo+naPE/CKIJTWy0GmneYEelMDLPy+rIXASqbFLrWxmw5fQpfG95FLOJN?= =?us-ascii?Q?wYSoFOZ7HpH0X6X6Of/DeHomhN7s5iti1UmCuPrqee3TnIvNFdu5hjTZ6AQt?= =?us-ascii?Q?R+M0UyKWpiwHuFPdp2WPkhMd61spiRxauDsxtWm0qtQ/KfhlgaFSQhgNxAqM?= =?us-ascii?Q?I+PM5GhmODxoYmZm4ejuy5SUeH/d4Eqlgm29V3Ccv5fLx//+mUj+iMfpavvc?= =?us-ascii?Q?ek7yRsTfl3rwmYSmV7UpjBhpraAInKHUkoKXDm0z63w4VzEQ/gepPN0w2Gvh?= =?us-ascii?Q?ZLJLh+0rH+pqD5/3FmUGQe7uPHGu2i3oo0D4dFqmTX0p2+mscUTptb8OxyFC?= =?us-ascii?Q?YGDEpiEs4bIeBWR2Iuse7Cb6JVCkPPurnADmST3GyjZIsyJSM7ElRyAez361?= =?us-ascii?Q?IcpY78MFwuVXidhSLJhQqB7biFeA8Ka3uxl4CBNwZ0UL829uMbu2OD2+Gw2H?= =?us-ascii?Q?j95T+0atUGMOFQP1bRDqnOIVOx+AbgwuLLIMpkDNaGBkh2pnHc2zsfQZJ/6/?= =?us-ascii?Q?0JMe+mY77sLm8vlY3KQNX9mS5nIi2/3PwEImmvTe+ArDVVjerlulQOp9/x4G?= =?us-ascii?Q?JbfKM7Hf747eCmPI2gh3tmpq3cvhdI7T/g3MlpHeigY5knnuAOUa7rUda3v8?= =?us-ascii?Q?2tHAPmWB1UMTalnb/1kAlXt5X69OpPuFosp5QDZM+LW5iCur8RcAGZDf75oV?= =?us-ascii?Q?EXDItVWp2/0LtOB/b1gYgiMRiwUyBxP0UZx8CSBVBag2QqOIA6oBP+ZP/BCY?= =?us-ascii?Q?HgC7Zsi1+I22HiOLdsbI9CieFrrlKuVuzzviHGsf0QYHfnBtkcl5VBXrDdmT?= =?us-ascii?Q?TJHqGAGYWZfIljecms6qGymBPMPiuARuqPM5QjZfNI5FeHbKtbLhldeN+A39?= =?us-ascii?Q?T23xntuSd+gGi1iaFmaYS3fjZh7HlfXmCm5VNE4pesx6tX3cov72MY1pLzyB?= =?us-ascii?Q?ONMNC9l94JRSCMi7SgY9jIfZawi+EsONwxXLrDIJslbBb6JHgqpUvbAgMjRF?= =?us-ascii?Q?ukcoj+IPFqAlAeshPzs9Zbm5pMaxWFMX/a+FEMtjHjmzGVF2i9A7U71d6LFZ?= =?us-ascii?Q?sEJ5eizy2Gl023j6GsgHYho6QPUFPohthL2kL9WNQgGqr6i4+oxXTfSO9JNT?= =?us-ascii?Q?uRIslT5LYhvZL62jl7zYE+MCOUVlKZDfM6Moq2It7HQJLW5Hg5/sEL/KIWgA?= =?us-ascii?Q?k2bD4eF000rmu1RT5vTkmXVXeq4aOUwAgAjrq5S2EOyNztO1TLxJBFIXcsKv?= =?us-ascii?Q?NVmOaov/CjUer3i30IXpDOJ5CUH84Fk5UrBjSZBJg57PXT3RF/KEKAJvZriw?= =?us-ascii?Q?rTmpp6TTOy9F6NidEi4Jw6quX/4KQOzp7lmiBVjqPb+z5xskAWIqzP3JnC4Q?= =?us-ascii?Q?S+SA3aNBVCF29dmMhgP/T6yod2bvc2HIGJHSd8jasHb8s68A0lj1Sxv18vuZ?= =?us-ascii?Q?bx3SLlR9gPK7wrrTG6uQujqeIDyu1niZseDU9Dqj26auyS8y91p2h018Zx80?= =?us-ascii?Q?o6KXVdMHgWB7jSFASAbgNukPh/Woig9O0uFxvAcWnk3W4JGdNlAjVDv6lKE8?= =?us-ascii?Q?0L0IGoMD0g992SZ1PBiKMsG0lLTN8X4rii/9XtBHg0FcnsT1sgA4s54eLdEL?= =?us-ascii?Q?8mf/csz3wsPKuf5PYv7Co78DmjiTKdU/5eX2NaO8sZSaN8LwDSykiiHmLeEX?= =?us-ascii?Q?Vqx/zRJk/lcKY0LasvnvXfja+R+V61A=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 07144ac8-c9fb-4f8f-8c30-08de97255100 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Apr 2026 17:19:26.3650 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: zCiaT05GHzP7PjFTA+w4VribgvlOnXS3+NBL2t3nu2zJVRN+AlAtzqH0LYocbuXxjV8yBl24Ucqm9dGyHovxSd9SxlTCGT2Ric7FbOzrPo4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1P251MB0930 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libpng: Version bump. 1.6.56 -> 1.6.57 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Security fixes. https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES Plugs CVE: CVE-2026-34757: Use-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST Signed-off-by: Christian Melki --- rules/libpng.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libpng.make b/rules/libpng.make index 43ad8c8eb..4079e2392 100644 --- a/rules/libpng.make +++ b/rules/libpng.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng # # Paths and names # -LIBPNG_VERSION := 1.6.56 -LIBPNG_MD5 := e30798a97361f11390a624b5b48c1c74 +LIBPNG_VERSION := 1.6.57 +LIBPNG_MD5 := 07cee8fbb9f4b91db5b36db02f4ccdcd LIBPNG := libpng-$(LIBPNG_VERSION) LIBPNG_SUFFIX := tar.xz LIBPNG_URL := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX)) -- 2.43.0