From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 15 Oct 2026 07:58:24 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xHETw-00DnRQ-1U for lore@lore.pengutronix.de; Thu, 15 Oct 2026 07:58:24 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xHETt-0006rC-Ez; Thu, 15 Oct 2026 07:58:21 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xHETZ-0006Iq-MK for ptxdist@pengutronix.de; Thu, 15 Oct 2026 07:58:01 +0200 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.4.pengutronix.de [10.17.1.19]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 9D736201D35; Thu, 15 Oct 2026 07:58:01 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1792043881; a=rsa-sha256; cv=none; b=SPs0P6Kp4L12LGssSnX4uF3XTHutDslA2g8iKebx89IENZZH+Nj4MYl8GZw70PLfTTnJEJ 3JiEVzKaS1Q3CxLMKFAIcDtL20UXHklKtRg3U/VcU9UIdu1D7qbyM2arYNO0e8Cxdanx1m trbn60g/ZF7YLhslR1NrX2IJyifhrQ5zpwIHbjj3tkU7TzQ4sHrMyoq7tZRIzxpAJ71YGc 9BfeglYhobBLAkuJ/MrTKmDNRRdMTYGQkSPnPkxmwMmYoU1uCym0WU5w6lagtMpSDq7Tdt bsLSNaUoNC9UVqwsyJiv4j6IP8FNxuwaD0r3WlLR4fFf9xuucVAWQQEHxCswvA== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792043881; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=PSoCOc2MydtKD5ixRHxqMUxPLWLh9eHYV6kQgbHRdcs=; b=EaVnOAoWxcfwDBC3CYf6SLrcYr9cn/Gb5tMgLwgKT3odnYDV4bBZTYJFL3V0f7iYhmmazf Y0AsfnYcy1yks/BOKhyBL4faNNm/3i9M7fGmJ56jte4BruTLsRXY4mSEHnzokDA83TOIXV aSa+VAK9A1ic+I1tM1C+fW0N0E3+YclgeIm9dPErH6s5RYvE6XM1c7A5hty7VbEUO1Aks8 7V6jDYAq1m7tmytm5b1IVEp3lgf7vy/5ppu2QNpy301Hrp0dj9pUdtgW13s0O/F/X691KO QzsMcvrnJc3Vj4PqCniH3jZxk1VfaCl2d0fdM5RZ75wPQpZLu/dmgoux7Wmrgw== Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 8EF07741297; Thu, 15 Oct 2026 07:58:01 +0200 (CEST) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Thu, 15 Oct 2026 07:58:01 +0200 Message-ID: <20261015055801.1415643-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261007184035.1702902-1-christian.melki@t2data.com> References: <20261007184035.1702902-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] libpng: Version bump. 1.6.58 -> 1.6.59 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as cd22abf9afdccabb312ef901b6fa5b6d7e42c5f9. Michael [sent from post-receive hook] On Thu, 15 Oct 2026 07:58:01 +0200, Christian Melki wrote: > Minor fixes. > https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES > > Plugs CVE: > CVE-2026-46675: Use-after-free of zlib input in `png_read_end` > > Signed-off-by: Christian Melki > Message-Id: <20261007184035.1702902-1-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/libpng.make b/rules/libpng.make > index 842fb4ff7556..c1e759b46664 100644 > --- a/rules/libpng.make > +++ b/rules/libpng.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng > # > # Paths and names > # > -LIBPNG_VERSION := 1.6.58 > -LIBPNG_SHA256 := 28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775 > +LIBPNG_VERSION := 1.6.59 > +LIBPNG_SHA256 := d80dd2a38a37f803cb9b6ac7b14bd6e74ddc3b654780a8380bdf93523fdb4389 > LIBPNG := libpng-$(LIBPNG_VERSION) > LIBPNG_SUFFIX := tar.xz > LIBPNG_URL := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX))