From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 07 Oct 2026 20:40:52 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xEWZQ-00B26w-0T for lore@lore.pengutronix.de; Wed, 07 Oct 2026 20:40:52 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xEWZO-0001oN-Vk; Wed, 07 Oct 2026 20:40:50 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xEWZH-0001lF-NH for ptxdist@pengutronix.de; Wed, 07 Oct 2026 20:40:43 +0200 Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::3]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 3E66C202342 for ; Wed, 07 Oct 2026 20:40:43 +0200 (CEST) ARC-Seal: i=2; s=20260414; d=pengutronix.de; t=1791398443; a=rsa-sha256; cv=pass; b=CIAioZQrxNusHd7V+AghRjYBwe4f+Z1b2WZnvwKW3z9e4ZHihYo7DeehfhCzVLk2vVyoZe L+LPxwFbq2IsY00AxeWJoaGdBHUgWm7u8g8ohAAjMRLP9R+KpTFHzG1o1retFi9pqx8d01 ghr3xQuDhwiCnwWUx3ivVOAP8ZCjwn+ixupaUQ00VBm3rCMkE2nlD9i/Vw9hfyBumuWCB6 sSEZklxbuAwWuz8jNhu2115QioFwaSo2s1h7Rrfwu+96cW1dVCDEvKsi3RybYUqNsWqHnj Mu7WuCQwFq2IPk+Z6z2jhRgTkqXRFKwEzLKX1oSE9g2h9biiseSAXvrr2DdcHg== ARC-Authentication-Results: i=2; mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=XBbr0RBZ; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1"); dmarc=pass (policy=none) header.from=t2data.com ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1791398443; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=q9ibtkg3dfdmOxV/QZKklVJ5GzBsOhajQ7PFR0JYRmg=; b=HHIE7mcaDZX0v/ZilFtiPDZT3ksOaTQ5vX/7ib7lWc4TLGqDVIfaeZwq3QFDktV1wSwK0y eiEdkPTRlwrgEoER87JdNv+aLSvHSPJb/l9+HqPs6giNJQvHwjAqBz3BK2qdosC5E+Oh37 W3wdVmgRooIEJFTSCAlVxycIvpczdjnQWP+3PIfaot/OuAvLK91Tp+iA18x9fvu8J+J2Z5 sCw9qXA4s1rHiHksNv2ShQAHQzRznuUo7YaO9Nu+2aFP++qzHgYg29csg6WoOpETXQS+iW k8vXD3eiiHPwSRZDnZa8J2BOudVQrLtQeB0YpA2jgSOQKJ1sIVOJR6z5WtrY8w== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Q7rY2l1h0tNoikJoEx0xJHCLp0T7aLdiFdgQPinELx+KeH1yGjGnEO0udoYBGTbHQdqfUkw7Vs+yKu0w6g8bID5c3toR+Qa9S041SHp7pIHOiYu4qHft+BnBiLDdZlepGqq9ejUvC+b03/ozdruNlfyeqGMZjlGggcAVoguq9+PkxTPqBV6V2mRQIg5t2Umm4NlOC9RdrZSEru6E8vDOwtlMZapOkppcs8vkB32OrUnemEhqSquo21uiiNtZcaeHkTcQ1mz6QsaRNxtPgi2nWqJ7zl+k092TT7+3t9Dy2W05UebrcwWSuEN+c3Hn9vnTA2PGJ9mrkgDFMjYm8qZEnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=q9ibtkg3dfdmOxV/QZKklVJ5GzBsOhajQ7PFR0JYRmg=; b=YCIjKW2LB8hHun0yE0uZX8H/yFusmcir7fVY8gLefeX7UCYh9qv4W7iu8mU8jn3tTj0e60GVzrkfJm2HdPjzMyu8QBFuPo6113G7tjq4LK9eNbnrP2zYSUMcHtx3D5C0iuza2cYBIysywt/t2rYX/p5kkPt8mhXXe2tXFl/5XDexhTi11oTPj/+itLcCBiaNZu0gbeezyQKWwzksgrKvZ/osDjaIH98P8hBg03DSJFbYkdJHG+cWvvKHxFvbtImg38r3gdj/oUR2t/MacMCXsGw3hVLy2K2zKYhAOl7cNZVeUCQJhxpjuomYNBWtp5yoUfC3zICeQfbxzaQrd2NeCA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by DB9P251MB1132.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:5e0::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.15; Wed, 7 Oct 2026 18:40:41 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0496.010; Wed, 7 Oct 2026 18:40:41 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 7 Oct 2026 20:40:35 +0200 Message-ID: <20261007184035.1702902-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0044.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:26f::17) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|DB9P251MB1132:EE_ X-MS-Office365-Filtering-Correlation-Id: 975e6031-7798-4268-79e7-08df24a27d41 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|23010399003|376014|366016|1800799024|38350700014|56012099006|260925021911599003|260925022911599003|260925021311599003|10067099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(23010399003)(376014)(366016)(1800799024)(38350700014)(56012099006)(260925021911599003)(260925022911599003)(260925021311599003)(10067099003)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?nnzfnEbkXlTRra2wmIP7O+QDRIMhmnEI6L2PeTVBBxMVvS4C+DhdJRAO8IV3?= =?us-ascii?Q?Smg70fZk/jx0+iXZIeguuAolPjeiL0DW7CyGlcHLsPZIUM4RFb6vNlYVZuPN?= =?us-ascii?Q?sUGRCi/7s6y0j3IoK5987OS6jGhy2Tv99+mrW6CHabksY4xs0I/kWDdNibr0?= =?us-ascii?Q?LuSgL+H5NaVUE8Lq0Om/mzmPk0/JlBRC+mKl2x24KnHGGQUuxub262a33cWi?= =?us-ascii?Q?ZwfJgI9ho5TSBBBYJPVmTAeRIOpRzxvxk6MrWB5sxQEnTEMghmdHvCR+lfHQ?= =?us-ascii?Q?N8I52Xhr99xt860nwrPp8yZcKdj03DRudBaib7lPWkwTXmo7gp19tJ3j5c8R?= =?us-ascii?Q?dZ7LEWFBbJn9DbYNoVbO29bn4AT8jquvnK/af1FFTQdSL2bv8KfCk/ImebL4?= =?us-ascii?Q?u5ylry6aTVK9eRgeVQjFpDRiSREG57okEYE28BLMaKkZFooqArfvIK2mXfxt?= =?us-ascii?Q?mi2B5OkHE2QQguzOIbSslHiyEd7bOKZmqVeEO7iDVRfx26pKF/l0073LBLjA?= =?us-ascii?Q?H/8ihwqDzUC+mFRotldRYnaFyM5iUDvrJfQZiDC0GVRMBTNp7V7bzs3u05YB?= =?us-ascii?Q?iAiUsEOhz2alLKoCqrSwhvtUzpsPk21Im1yDJaZjR6GwcAmbzwhqnmPlENCw?= =?us-ascii?Q?GGEOMTbq0aWlM6bI5kTLr9mMRi4ye7OhKTLiUMbdY5oGPIYZCniRWRLapfu5?= =?us-ascii?Q?tZHRiHr6d9V6MPG4O1umk5Hr8d99XVoH5NwZaBVWN4R72uiWC3ymDVfjcSPf?= =?us-ascii?Q?9FzcNyGtsbJwVe0q292X5k+1LU+l5deXDxQ68m5NJMQFIVe1dBywQ+/+R5Q3?= =?us-ascii?Q?qtQRPW8+caIQRwQqIZ9AcofnWof1IYPwYYPgIz6FZ3LZaLRV4dDYH7P/RL+V?= =?us-ascii?Q?Tp5viQUOV0uayoWt1DpyT556ZmnJd8TjRwsO9SR7Zx/sW83VUVxEKc9rcYn1?= =?us-ascii?Q?jQ/CF7rH3Mh/lIUVkiNckX2xOhaDPZTtCKTqk38tbVJOJbiG7ckzTQW6ZPzW?= =?us-ascii?Q?zlyYe1TKg9SDiH8mlg7XERm/7phLPRk1g2nzLbfaYibh1C8tRKQBm07Z1T7W?= =?us-ascii?Q?g1Fowksao6D2MFcHpbcKVD/oi3y5bnp/swCfYftAuBIv5VoKv8Y0J1At/Ylh?= =?us-ascii?Q?t69ueq7bzmS8dw6d9sYWsA8JsMUuUQPSdFsvoOCiNLPjP4hAcUYf8astRsQz?= =?us-ascii?Q?oN3gAi16h6Z5ibjnR6uAmhlWPTHrHCxk8ACjX6jsAcDYRW4P39IShshgvzMa?= =?us-ascii?Q?1bZAXt0+wSssyCwgdsBxpQm358AM/nLseqaPtGn+/hO3zfrd0ay2Hw1YNGBd?= =?us-ascii?Q?ITd9ATiicCN5w1ca6DXqI/vq26g+qlLNPPMZ8CWU36ESfDglKpEMH5xJHKfj?= =?us-ascii?Q?Mq4FO5y+6RkufpGW9a6CLhH+CJ+xFS8Cq15iHDTmZsm8+l87vm+qSlgtJ0dK?= =?us-ascii?Q?uVkkYpxkBwx+ASogVtLmNHWUptBvyUggTYvJifC9hITFTmHOpz64x9vZYHkn?= =?us-ascii?Q?3rilFxLViTEDMBTXyNz9VdyWNEqr+hFQwF0/kF2RVkWaibIm3sNVitkCOmny?= =?us-ascii?Q?8K7WtrNVZdvV2eiOVr38RdwDct8EdKEdf/m/jNJ/gXb+6UGojWXnsmqGr+3O?= =?us-ascii?Q?YTklh9Ox5mWIzVZkRJRh0TuimWSl1W6bLTmJzQxQkIRPjPnOpqaMnb0Q2AfV?= =?us-ascii?Q?Ay1njR6+mTcZb8QXTsgENA7J5c584DpwAeSx0O1BQSQGHvU6PO0kWOnmfdqi?= =?us-ascii?Q?g9CcOIKIVEXe5ddA59M4oG/4ziXlEW0=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 975e6031-7798-4268-79e7-08df24a27d41 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2026 18:40:41.6472 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: bG2hwA4q3xpmhDP8hIox5vB1kJqOB4iVbtPNqgEtllJEi6pqfM5JJ//d6MzUGHxa3kJlvT3Aeqx53OihtmCIwBiapMNbX9wyVd+oQCTgkwI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB1132 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; TO_DN_NONE(0.00)[]; FROM_HAS_DN(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=2]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c200::3:from]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 3E66C202342 X-Stat-Signature: hjz8q8w9wxaj616yo98wzsd5h6j6a9sn X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,FORGED_SPF_HELO,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libpng: Version bump. 1.6.58 -> 1.6.59 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Minor fixes. https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES Plugs CVE: CVE-2026-46675: Use-after-free of zlib input in `png_read_end` Signed-off-by: Christian Melki --- rules/libpng.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libpng.make b/rules/libpng.make index 842fb4ff7..c1e759b46 100644 --- a/rules/libpng.make +++ b/rules/libpng.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng # # Paths and names # -LIBPNG_VERSION := 1.6.58 -LIBPNG_SHA256 := 28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775 +LIBPNG_VERSION := 1.6.59 +LIBPNG_SHA256 := d80dd2a38a37f803cb9b6ac7b14bd6e74ddc3b654780a8380bdf93523fdb4389 LIBPNG := libpng-$(LIBPNG_VERSION) LIBPNG_SUFFIX := tar.xz LIBPNG_URL := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX)) -- 2.43.0