From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 14 Aug 2026 17:39:45 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wuu0W-0035ip-0l for lore@lore.pengutronix.de; Fri, 14 Aug 2026 17:39:45 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wuu0M-0001fM-F0; Fri, 14 Aug 2026 17:39:34 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wutza-00078e-QY for ptxdist@pengutronix.de; Fri, 14 Aug 2026 17:38:48 +0200 Received: from drehscheibe.grey.stw.pengutronix.de (drehscheibe.grey.stw.pengutronix.de [IPv6:2a0a:edc0:0:c01:1d::a2]) (Authenticated sender: relay-from-drehscheibe.grey.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id A044520227A; Fri, 14 Aug 2026 17:38:42 +0200 (CEST) Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wutzW-001TwF-1r; Fri, 14 Aug 2026 17:38:42 +0200 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1wutzW-00000007Z1a-2BW6; Fri, 14 Aug 2026 17:38:42 +0200 From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 14 Aug 2026 17:38:42 +0200 Message-ID: <20260814153842.1802923-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260812141319.1058695-1-ada@thorsis.com> References: <20260812141319.1058695-1-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.5 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] libmicrohttpd: version bump 1.0.5 -> 1.0.10 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as ead4af80126d0ca1c65525712f71f51d1a94f634. Michael [sent from post-receive hook] On Fri, 14 Aug 2026 17:38:42 +0200, Alexander Dahl wrote: > Mostly bug fixes for minor issues, and rare cases, from the changelog: > > Fri Aug 7 10:15:01 PM CEST 2026 > Fix race in thread-per-connection mode on wake-up signal > between daemon and thread that could result in lost wake-ups > and thus connections that did not finish processing. > Fix rare assertion failure in relation to suspend-and-resume > processing (harmless if assertions were turned off). > Releasing GNU libmicrohttpd 1.0.10. -CG > > Thu Jul 30 05:32:00 PM CEST 2026 > Enfocing a minimal size on the PSK. > Fix support for red zones in memorypool. > Fix rare over-writing of HTTP version string with network data > after parsing header. > Fix rare crash from adding connection manually followed by > immediate daemon shutdown. > Releasing GNU libmicrohttpd 1.0.9. -CG > > Tue Jul 28 06:12:03 PM CEST 2026 > Fixing additional vulnerabilities inspired by reviewing the > code for similar issues like the ones reported by A. Ramos; > expand the test suite to cover these and other issues. > Releasing GNU libmicrohttpd 1.0.8. -CG > > Mon Jul 27 06:12:03 PM CEST 2026 > Fixing various vulnerabilities reported by A. Ramos resulting > in possible crashes or out-of-bounds stack writes for certain > requests in specific configurations. > Releasing GNU libmicrohttpd 1.0.7. -CG > > Wed Jul 8 12:32:30 PM CEST 2026 > Fix various minor issues, like theoretical > integer overflows for extreme inputs or NULL > dereferences if the application passes NULL > where it should not. > Releasing GNU libmicrohttpd 1.0.6. -CG > > Signed-off-by: Alexander Dahl > Message-Id: <20260812141319.1058695-1-ada@thorsis.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/libmicrohttpd.make b/rules/libmicrohttpd.make > index dfdd247446c8..37af4c259969 100644 > --- a/rules/libmicrohttpd.make > +++ b/rules/libmicrohttpd.make > @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBMICROHTTPD) += libmicrohttpd > # > # Paths and names > # > -LIBMICROHTTPD_VERSION := 1.0.5 > -LIBMICROHTTPD_SHA256 := b46d00f58efa6f497b97d2e782c4ee66301d412ddd855dd3068518b3a2cd3ea2 > +LIBMICROHTTPD_VERSION := 1.0.10 > +LIBMICROHTTPD_SHA256 := 04bfe8ef75db7d629a33de767599765cecadc56274a39822d5d081030d577685 > LIBMICROHTTPD := libmicrohttpd-$(LIBMICROHTTPD_VERSION) > LIBMICROHTTPD_SUFFIX := tar.gz > LIBMICROHTTPD_URL := $(call ptx/mirror, GNU, libmicrohttpd/$(LIBMICROHTTPD).$(LIBMICROHTTPD_SUFFIX)) > @@ -74,6 +74,7 @@ LIBMICROHTTPD_CONF_OPT := \ > --disable-coverage \ > --enable-asserts \ > --disable-sanitizers \ > + --disable-fuzzing \ > --disable-experimental \ > --$(call ptx/endis, PTXDIST_Y2038)-year2038 \ > --with-threads=posix