From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 12 Aug 2026 16:13:43 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wu9iA-002M8W-0x for lore@lore.pengutronix.de; Wed, 12 Aug 2026 16:13:43 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wu9i8-0003rh-FY; Wed, 12 Aug 2026 16:13:40 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wu9ht-0003ra-6N for ptxdist@pengutronix.de; Wed, 12 Aug 2026 16:13:25 +0200 Received: from mail.thorsis.com (mail.thorsis.com [217.92.40.78]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id EAE3220128B for ; Wed, 12 Aug 2026 16:13:20 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=thorsis.com header.s=dkim header.b="t/UguaT2"; dmarc=pass (policy=quarantine) header.from=thorsis.com; spf=pass (mx1.white.stw.pengutronix.de: domain of ada@thorsis.com designates 217.92.40.78 as permitted sender) smtp.mailfrom=ada@thorsis.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id DD28F1487AE5 for ; Wed, 12 Aug 2026 16:13:29 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1786544010; h=from:subject:date:message-id:to:mime-version: content-transfer-encoding; bh=6uM0CaspcnEc+9u+T0bB/u2FAsLxY212snsrvRUcuAw=; b=t/UguaT2LB+L9lSFXIoYbsmP1eJ1//MS+j2kq0IntSnLPGIlv8v0yHE9dTwmWeeAMMNrFv MXneRzymb0EWiyi8NybOtX2/UThFfO/XDmeoQentBVyRjBdjLc5dtEbYc9mMj8LR/GEyGE VHF9qwIjPpLA8Pbw34KL+rzBE+PQLxyDzMNtzEG3Mni2MCVe1Nzb4nH1uuii/tywKl+QyA SBIRu2WTqBDEZAuyUwAuESR9/7kt92ebbyaiyNK3yCXp7QWKkZjnuG5Me/kkHUYWhOZuqS Yk4Ja/khwAmBOozm3L/jaSOISvwTdNifKWipI9BTF/5t1JRHuymfXc5I9X/hNg== To: ptxdist@pengutronix.de Date: Wed, 12 Aug 2026 16:13:19 +0200 Message-ID: <20260812141319.1058695-1-ada@thorsis.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: iy4qjokabtxqymurjtdcrjft77rwgfz1 X-Spamd-Result: default: False [-2.50 / 15.00]; BAYES_HAM(-3.00)[99.99%]; MID_CONTAINS_FROM(1.00)[]; DMARC_POLICY_ALLOW(-0.50)[thorsis.com,quarantine]; R_MISSING_CHARSET(0.50)[]; R_DKIM_ALLOW(-0.20)[thorsis.com:s=dkim]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RECEIVED_HELO_LOCALHOST(0.00)[]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; DKIM_TRACE(0.00)[thorsis.com:+]; RCVD_COUNT_ONE(0.00)[1]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; PREVIOUSLY_DELIVERED(0.00)[ptxdist@pengutronix.de]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; ASN(0.00)[asn:3320, ipnet:217.80.0.0/12, country:DE]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: EAE3220128B Subject: [ptxdist] [PATCH] libmicrohttpd: version bump 1.0.5 -> 1.0.10 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Mostly bug fixes for minor issues, and rare cases, from the changelog: Fri Aug 7 10:15:01 PM CEST 2026 Fix race in thread-per-connection mode on wake-up signal between daemon and thread that could result in lost wake-ups and thus connections that did not finish processing. Fix rare assertion failure in relation to suspend-and-resume processing (harmless if assertions were turned off). Releasing GNU libmicrohttpd 1.0.10. -CG Thu Jul 30 05:32:00 PM CEST 2026 Enfocing a minimal size on the PSK. Fix support for red zones in memorypool. Fix rare over-writing of HTTP version string with network data after parsing header. Fix rare crash from adding connection manually followed by immediate daemon shutdown. Releasing GNU libmicrohttpd 1.0.9. -CG Tue Jul 28 06:12:03 PM CEST 2026 Fixing additional vulnerabilities inspired by reviewing the code for similar issues like the ones reported by A. Ramos; expand the test suite to cover these and other issues. Releasing GNU libmicrohttpd 1.0.8. -CG Mon Jul 27 06:12:03 PM CEST 2026 Fixing various vulnerabilities reported by A. Ramos resulting in possible crashes or out-of-bounds stack writes for certain requests in specific configurations. Releasing GNU libmicrohttpd 1.0.7. -CG Wed Jul 8 12:32:30 PM CEST 2026 Fix various minor issues, like theoretical integer overflows for extreme inputs or NULL dereferences if the application passes NULL where it should not. Releasing GNU libmicrohttpd 1.0.6. -CG Signed-off-by: Alexander Dahl --- rules/libmicrohttpd.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libmicrohttpd.make b/rules/libmicrohttpd.make index dfdd24744..2b02ba0c9 100644 --- a/rules/libmicrohttpd.make +++ b/rules/libmicrohttpd.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBMICROHTTPD) += libmicrohttpd # # Paths and names # -LIBMICROHTTPD_VERSION := 1.0.5 -LIBMICROHTTPD_SHA256 := b46d00f58efa6f497b97d2e782c4ee66301d412ddd855dd3068518b3a2cd3ea2 +LIBMICROHTTPD_VERSION := 1.0.10 +LIBMICROHTTPD_SHA256 := 04bfe8ef75db7d629a33de767599765cecadc56274a39822d5d081030d577685 LIBMICROHTTPD := libmicrohttpd-$(LIBMICROHTTPD_VERSION) LIBMICROHTTPD_SUFFIX := tar.gz LIBMICROHTTPD_URL := $(call ptx/mirror, GNU, libmicrohttpd/$(LIBMICROHTTPD).$(LIBMICROHTTPD_SUFFIX)) base-commit: cfe40b077f62b2dc38ea40209f825603d645ca1b -- 2.47.3