From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 19 Aug 2026 20:03:49 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wwkdg-004wi7-1B for lore@lore.pengutronix.de; Wed, 19 Aug 2026 20:03:49 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wwkde-0006GA-Cg; Wed, 19 Aug 2026 20:03:46 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wwkdN-0006Fu-8N for ptxdist@pengutronix.de; Wed, 19 Aug 2026 20:03:29 +0200 Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::5]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id EB8F4201096 for ; Wed, 19 Aug 2026 20:03:24 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=ReJtrXtG; dmarc=pass (policy=none) header.from=t2data.com; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=cF7Wy9soQydKF2gj2GcDde0GkMeIXTzhZch2w84akL+uhHR34G7dDWcePhsU0lRN6hgGdZchj32QmJ0e21U1NCfchLHzUFRW+FbDtR+o7r+4HAY38lw5uy4rUBgihkhCTXZSJHmMV3jlpAwyXD8mzp1Htp7H2pRrexs79HuMM0G0ReHOdLyK5VzImHmYu8Gij43hrHyu6qToX5WgHCBWLItQ/xao3ETqoh8wmsAL+2dwbhQTjQ5mbehGueKqWoBMvmUpF/uU+7HON+w7rPc9t2vtBnDpO8Nt6lujj9p661cF6JbGyci6CS0tbKD5LyEIJJHDCf9w8RbBs5i9ca0Dtg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pEJ5GT9yiqM0GJhnRAcMcgQwJQKBsqzxXNzRx0E0rV0=; b=kvED1fIM3bwPp0UbPFDq3l/Rkr4sY/TQ6lMh3rvB9T7l1w8Zb8ab4/r2hg0VSuSPe+w01QAA9opo5HpApYWo5qTmKtbC7p5+IYGFqrn1kgdyrViFUBhyfiF0C0F2ETJdMivwV5X9e0BuNlpC3ZDI8JYmZNF396bgkLPBbid5NBmIf35SVFf8rWRafRVofJX9A1qHlUyAP0Kn9FYqxotYfhfApnKeuYceaDb5cBzM3QGMFbZ14Gtr1FzSvZ1ewX38nThe1iqvgH1iwwE8Kf9MCSAuFqiMloNN6tCL6hDiea/4NXgrP7a4vugD6UdBuP31JYODxYJZr+UIRe7FWcyamw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pEJ5GT9yiqM0GJhnRAcMcgQwJQKBsqzxXNzRx0E0rV0=; b=ReJtrXtG6s/TYRpliOOhXPayruVnhNljCDStUE8tWnxWDQ8MU9rVnV/8qfvy7QIExqlzXTgrOiJIuud4APb9wkFV5TTGC+yXaEKTJqHlbLu1MHd7yC0Qu6CTA2pt1bgzQqVvFSV1EvHa8Kd8jhjKa6dgbYZ/YEE9RXzkOrXmilk= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PA2P251MB1079.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:424::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 18:03:21 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 18:03:21 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 19 Aug 2026 20:03:01 +0200 Message-ID: <20260819180301.3409314-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3PEPF0001DC2F.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:400::116) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PA2P251MB1079:EE_ X-MS-Office365-Filtering-Correlation-Id: 955e78ea-40e0-4772-d8f3-08defe1c27c0 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|23010399003|1800799024|366016|52116014|376014|10067099003|56012099006|18002099003|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(23010399003)(1800799024)(366016)(52116014)(376014)(10067099003)(56012099006)(18002099003)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?TMSXbYTTCA4GtnuRzJzJnfL2XHeXvknp8qBccOLC0roJU9OaqStE0r3fbsZp?= =?us-ascii?Q?GbyGhhPXK/+XHTRRHPQWpqeUjlrnKxcsRyxKJFHkAGWHqx9rYgoC9rL4NONq?= =?us-ascii?Q?PLAPCE6JHwWZqiRJ9ukHTiWymza5STlEKIZDpNoZM6k0pIXdK7VNcRiua4/P?= =?us-ascii?Q?NmybsWHNGbuShY6XQ3vPlBp5Snv5ZFZDTVAhSWJhtPAT+RkxRxP5bPVTsAxF?= =?us-ascii?Q?TFi/3V50tgK7aSRlZRrZ026o4wlrU0kuqFHE/234c5laqNxrjA3tOT/TS+D9?= =?us-ascii?Q?4UUDa5DdYUWrqSZkzpxXLd5x+mKnybZpwf1YJEYLTdC/8y9oW3xZqXfetNHM?= =?us-ascii?Q?lD+1rtTIb9N0FgavpuRQLG6qDeMea1pLKQSQjOgCkDhncNRHr/BDew/gAb4d?= =?us-ascii?Q?qCirjinPdL/oXJ44+7MiD8mHF54qZmycDzVaXeN8sSDWhfWtSpookMqNuWFz?= =?us-ascii?Q?brnK7jAzK8ZLUkWjKL4wv6rgVQ/KTM8ykGRRu+aM1Dkpj0VQz+gRQCv2rCZa?= =?us-ascii?Q?s4qsYOuqfKEup3Plcxt5md7WNeDLEFPUNDZXdRX//dm1G/5O8PW1vBf1EpuU?= =?us-ascii?Q?1uDJlWKiKQvsSAzPbaAWlV8zNyWfREPcy5uNZ44d6eJifO18tRA2eqNbOil8?= =?us-ascii?Q?cPWzKyX40sSe55eoUTEkb+O5xnR03snKrSZpriZzFP51strn9u/T8NazaFOb?= =?us-ascii?Q?zMKekTfGly6hQrbGCndva2YS1RWUXQLDtglbyHZ2f3YNkLDTeKnQ9/i8te08?= =?us-ascii?Q?bgC/NkCPRddBwcP0xg9MiMVSOEL3vDfJWabvhgqPNs2rFmpMDZCAHJDaLF4R?= =?us-ascii?Q?uZMfNggHmv+PJkYgrSmhesHTd22vhJEuiGeR0wbQdeFFov/dzmB44g3SKirJ?= =?us-ascii?Q?wTbijUOQ4nRjkuGuImS+t/z52zv7dSYnBnzMaFJ3y2tMwKECqpTRJ9Of5gsN?= =?us-ascii?Q?JUiv8aqcPrs1WLIbDvyiJH0tyHVITzLp8BDtRnVQdlBXUHi/SeHFeN9vsxUr?= =?us-ascii?Q?B8o/nftMaXCSNxcrSaiicLsJexg9dR1QEt1XtJqANFkUqfe75aGVJWm4yD2p?= =?us-ascii?Q?wUAk2feWrlxu8h81ZtmxX8wvdS/aJF8ukm1D0T1NYRgpCT3aFIa7R2Ba9cD3?= =?us-ascii?Q?RSZRPYyPnNaU++ZHQqbuHew053GcLnJrZPmn8mq2hgrFbvHl5rO76CEK9SRA?= =?us-ascii?Q?52FZ2s7xo6v0Nq3htjXzlQANjaitsHU7F4lQF+vWyF1uS/gGvB5wT5VxHWVp?= =?us-ascii?Q?8tN4aED4MWm9Oquv0lKAsw7SP9nzZfUAxWxZyeWdSa7pMdZMLUJd93Uc7neG?= =?us-ascii?Q?KvDZ2IiiIxIcPplKgzHEgtbwwH9rnHlVJkH651+CRfacAzEg9C5nSRrkq9RC?= =?us-ascii?Q?2Vy09c5iQoAfBaHr7cKNnr8tHojMquLbh8at2cuAEcHjl33HXfgzvuPaOuG3?= =?us-ascii?Q?GlDZkdpYDcJyGTfhJn8qtm7X7op3ikokqWfdovym8o4uKjZgsE/naYglmgng?= =?us-ascii?Q?yeKng5fLeXtiYGnNaut7lPONv7v2tLi9oALFWH3pN1pda4rzCM31AZY6x2hV?= =?us-ascii?Q?peM/fjkyN2XY6JjAvLIOtqe9oD1gK9BYJnCpxu2jy/czU7plOuHZrQwCQtSm?= =?us-ascii?Q?FrkvueeSeRTnhkeaPHoAgllkWXQ6EnYx+X+a0igpOp0L2nL0S8HheITucgcl?= =?us-ascii?Q?bYPU9gwIu8uG96Z985udzIyKjunnvMA+1Pk9cv13QUCaQaR5FEtTWcTRteX+?= =?us-ascii?Q?s2LTbExmGMSTUcuVYlhIfp89/cysV8o=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 955e78ea-40e0-4772-d8f3-08defe1c27c0 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Aug 2026 18:03:21.6314 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: VatuXBbJsyO63jZpDYcb5PHKeMXEzgFfjPdsYWrHV7f47ByFbYaSBjeKI5q27SgKbkqieXx8wGmXbJ0aRVY4iOTrMWkoePMF6S3CqWPSB44= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA2P251MB1079 X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: 4i5o57h4zh8duj8gya7wchj9zzkmk8i6 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCVD_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c200::5:from]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+] X-Rspamd-Queue-Id: EB8F4201096 Subject: [ptxdist] [PATCH] sdl2-image: Version bump. 2.8.8 -> 2.8.12 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.10 https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.12 Plugs CVE: CVE-2026-35444: Fixed out of bounds read in XCF image loader Signed-off-by: Christian Melki --- rules/sdl2-image.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/sdl2-image.make b/rules/sdl2-image.make index 84a0a1f44..156fc228b 100644 --- a/rules/sdl2-image.make +++ b/rules/sdl2-image.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_SDL2_IMAGE) += sdl2-image # # Paths and names # -SDL2_IMAGE_VERSION := 2.8.8 -SDL2_IMAGE_SHA256 := 2213b56fdaff2220d0e38c8e420cbe1a83c87374190cba8c70af2156097ce30a +SDL2_IMAGE_VERSION := 2.8.12 +SDL2_IMAGE_SHA256 := 393f5efb50536ec13ca4f4affb69cc9966d3c3f969e6c5e701faddf9f9785381 SDL2_IMAGE := SDL2_image-$(SDL2_IMAGE_VERSION) SDL2_IMAGE_SUFFIX := tar.gz SDL2_IMAGE_URL := https://github.com/libsdl-org/SDL_image/releases/download/release-$(SDL2_IMAGE_VERSION)/$(SDL2_IMAGE).$(SDL2_IMAGE_SUFFIX) -- 2.43.0