From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 06 Nov 2026 22:28:38 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xPRUD-0088To-2s for lore@lore.pengutronix.de; Fri, 06 Nov 2026 22:28:38 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xPRUD-0001JF-Dl; Fri, 06 Nov 2026 22:28:37 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xPRU0-0001Ix-GN for ptxdist@pengutronix.de; Fri, 06 Nov 2026 22:28:24 +0100 Received: from AM0PR83CU005.outbound.protection.outlook.com (mail-westeuropeazlp170100001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c201::1]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id E7A84200B4C for ; Fri, 06 Nov 2026 22:28:19 +0100 (CET) ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794000500; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=Ji3czGhxnMxLlLIy/2GJd1bT+KznYl4uwYIGnakGQbk=; b=bI3yyJNCl5Ja4kwHc60LZ/r4LGvoflY0bHdms7wkXJb6Jg11E99eWGz54vCHsMco/AtGjD KNGl1u0dJJU4DYAHvTC3JdptyNkw3szs17+kn18BAWUNPz91ROzw6boFol5ZIrMvbuAaHc gM80ewc5EWyFnH0foZOT7Zca30tpt18TMQNpXL3mN+Skg5ni3+qf33wI28cmuR2qfu+8Rf CHbjWY64reUYiMsyhet6Ecay/OElHhJByRD6FEJfB569LNttJt0jPdRObOOPV8OQFIpCTX nF8FK5j66ziNVv0DKOaKuvN/rnj3VGb0A1k8r/9Y/10pOxBZcZgdABagZiXd5A== ARC-Authentication-Results: i=2; mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=IHvDs2VV; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c201::1 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; dmarc=pass (policy=none) header.from=t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=2; s=20260414; d=pengutronix.de; t=1794000500; a=rsa-sha256; cv=pass; b=R2NX/k8szCI7IHWed1crSleLmUye4iYHm/kLUaA1LoFQjqs0wz+k6zIsBR6m1x9mBtRgVe WYgl8xNSwPQegUam2NjIHczp0vIS32PiuqpO/8263oBSgvUba3ZurEsyK1toaV2QYRtqs/ 1SIO6DeXhJUh9PPjwG5CGQJaW0zySsBVl0yhnjdwmRg2qCh0hJmpJdNyKqyiSsVDnV43to oJcfmvhfQDBGUN/eO5Ss86OHRZrvQKi3Uy0PiVuJ/hEeJ+BHs3YL/h9DmczaTOiPq7lqal Wnu0qJkjw2eWCHSX4o3hNKnSHo134c6lRHYYCMtSnuxbRd/DzMvMznLnU3WDXg== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=T4BrC5tdvTC+oRCPV0JNdtEO9FVBO9U5jmUDJ2D5bmIUoobrrQEMHsfB48WaUXsFErO+W68bA1IAjNplGsKff8coXpYeOltmiuEE3dZiE/L/GyXYQdyiDmQT6k2BUe6LQhJm8SWlLc6EKnlbz/gDZUOj0o9Ax0s9UCaMuNK6YvinMgx2VwRGBOzGEvuZ2Ff/dTXJM/j7XHIiQLvgpwp10KHczQozytyPhEHUMv1Z6MzDpRHWLB/SF/VcGi49kpoEiDmIZx1ycXNEkksiYu8ns46l9S/2TjZx6A88eRtIGzucnW1d5UOg3j22jBABD/6ieAZbTBqwQWFI+2PdV0Oz9Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Ji3czGhxnMxLlLIy/2GJd1bT+KznYl4uwYIGnakGQbk=; b=tMYe4Twaol+I/Qd1d4FCMnxn8OPHhmQxK8M5A0QBDlEmIuLrk1LfF4RqqWrVo4+aQoDeNgCCnjSL8tEuyyl3XOaB0eamLvY+4b495O8/ErCCsXVcGbUzwX7jqIiGTSFxMQgP27JkcC6w2TftOOeKENGdcX8BcwKZBmVZdH7Ut30mNnp/OAaQmtB+jBTYD1Wm1ZMSxB85ulPiML6bDz33zli8Ry5eULixyGwnSKN02rEJiXkZiHpFBsApFmTNwTSb1sM5irhdQ129bLXwLe+CN4JUMmMsozpRtouWtc3oACjxndP5BpA6BrvPzaSj4JNFP7Qb7+bdpWnXs4m1EmlTDA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none Received: from PAXP251MB0394.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:1dc::12) by DB9P251MB0169.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:2c7::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.11; Fri, 6 Nov 2026 21:28:17 +0000 Received: from PAXP251MB0394.EURP251.PROD.OUTLOOK.COM ([fe80::c8e9:257a:7136:fdc2]) by PAXP251MB0394.EURP251.PROD.OUTLOOK.COM ([fe80::c8e9:257a:7136:fdc2%3]) with mapi id 15.21.0592.010; Fri, 6 Nov 2026 21:28:17 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 6 Nov 2026 22:28:10 +0100 Message-ID: <20261106212810.3985300-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0089.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:275::9) To PAXP251MB0394.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:1dc::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP251MB0394:EE_|DB9P251MB0169:EE_ X-MS-Office365-Filtering-Correlation-Id: 10c1d0e6-1e01-46f4-c96b-08df3c4cdf2e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|366016|23010399003|376014|52116014|38350700014|261026140227099003|261026135527099003|56012099006|261021121427099003|261021135927099003|261021123027099003|261022105027099003|261022113327099003|261021130227099003|261022115727099003|261022075727099003|261021133027099003|261102123227099003|261028144727099003|261026121527099003|261026130827099003|261009223027099003|10067099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PAXP251MB0394.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(366016)(23010399003)(376014)(52116014)(38350700014)(261026140227099003)(261026135527099003)(56012099006)(261021121427099003)(261021135927099003)(261021123027099003)(261022105027099003)(261022113327099003)(261021130227099003)(261022115727099003)(261022075727099003)(261021133027099003)(261102123227099003)(261028144727099003)(261026121527099003)(261026130827099003)(261009223027099003)(10067099003)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Qwj0zFqE7F0dzjpk/WMbxwaXorRmWVbN8PRMWRfrTu6llx80Z5CGFOLBI32T?= =?us-ascii?Q?E9nWxCOZ1cceAAyN7sUecHB4BjCHFEHKQF+jfeGM3JI/Juu4TYlbvPZYbSfJ?= =?us-ascii?Q?7EtA1mldnz26L7MoiLFJBpxNRtGzJzTLeKXdOFLZIyGafhqoWf1CYln9mSpR?= =?us-ascii?Q?Z/RPFh8W5eOU/Z8tUiN3Kd+TDkVRW9BsQ73mgvzmuo6xgQfZgwtTmrt+w8Yk?= =?us-ascii?Q?vqZrR1virplw0e8h6Y5B2c68lBNDVA+L6rk33zF2qVJlhzOyPBKPnRNG+8Wb?= =?us-ascii?Q?zY7XBWTMl3E5IBWvxUMzSyksErJtAuVoizpIAL9id1wW3e7k4yYYsmcehZAJ?= =?us-ascii?Q?VHpXp7o2eFs4jJuiuO/gKXqOT0EWbJBP6/MWCHzByd3+aP+50QohMITBAjGe?= =?us-ascii?Q?kFwBoHX1WTW8uiU0rjDe82EQ15l1inafx8UsiekKrlia71EM3KpE3Dok9vGo?= =?us-ascii?Q?c9cKChGRl+nf26osC83c9Bck6fVETMUeX/idTI9xkHRcLjBTOXYxKeYdp1KR?= =?us-ascii?Q?hbsi5o8YPvEn/FHN59ngasjU7t8p/Hz5BLz3h56/Na1CzDtY1yZUlcSXM1Pw?= =?us-ascii?Q?bAgjRIZmTRXrJUZSftd4IfRTLZdGkrtCfb9QWBUnp16J5YifsejUKB3kBB/i?= =?us-ascii?Q?XTdNNQamN6LLqIFhsje5sdj9eJ8oWzkN6Sq2jIoQFd1zCWT5nW34Y6ebdTtI?= =?us-ascii?Q?NBzGU27pIH8+GhNUn8vST5Jzw2cg7gcnaDsaym4w5WU7nerwc18lH7Ttz+Cd?= =?us-ascii?Q?Dg8dJMb4TVBBpyznW3EcgvrKTldk7MqGD4OAfOaMnTtVPejhRpfFUzV+wM70?= =?us-ascii?Q?JSve8n3Zs86lZkILJbZzrr53gtlVAa/W2i5v0GRSoGtFw/hqCkY72WnEEfhy?= =?us-ascii?Q?yZ6+IBqoRYlaOWoG9CguJFKV1Epw47905Ivy2kiuqJ+85/qU23M7M1yUuOJC?= =?us-ascii?Q?l7KH0FsuUf6bh29MlgIao7dlTiksugvBY0OqUw9a+52Bu+MWmWk0ECH+ifla?= =?us-ascii?Q?XE3Vkrz+nnF6Wq/7Bp5//JPuxfB4A8O6VYANgFeFoshuOcPDygCB2rcvQ17T?= =?us-ascii?Q?vZYjfQunJrmlKITAdKUT3a99aa6XKqWVjAWiKX8p1J0J2IA7MwAVRP05y10i?= =?us-ascii?Q?haoBzy4sV9hO9VHQY5QQQZ71ifavQHKeoIZZBdTuYBbadWpDCkpYu3lntw3m?= =?us-ascii?Q?F8KQZvpBHw6DtSn1qSxfH8YylUlNcqRKX6veBWoIVjjQEdXPtIoJT+Lohk7p?= =?us-ascii?Q?62Z0WxHtxxSjDMr7D5tEI5pSg2xtUSL8tVfvW0iXyaZMBP+5Z+R9K+erjna2?= =?us-ascii?Q?He5hLm2lPmw9JxNpzwlM5scu435Ru7ZVY3Y/CdC6gr0tDfnFYFdv9JH2xD2T?= =?us-ascii?Q?Ez9AhrZR8I6pfEsEEhbSa8u0Eb9o43vHH/7VgxS3L6FC4equE0B9k7aIBTzM?= =?us-ascii?Q?tQ3tpxy12xf1BAUVv+pSpZOd8XNG92/m9PilkqbnQH8qmJtR0HBwtXIuqE9S?= =?us-ascii?Q?EaD1Nq/O9NHDQgBqx7h04rHyUqC2s8kikR5jFlyZkGdhdZX0fGHMfgz6Lbhh?= =?us-ascii?Q?56za0POOb/p4p2kIOlWl+U5eBKmH34wHb5UE4XKzmtwKsGGbjazzcktNdtuO?= =?us-ascii?Q?jAR2KFSQWpr+ALjYdMHHi96SPfWr7VikG+CulhMqVcgsm+s5tHRJ32mUiXBC?= =?us-ascii?Q?GXkAcKNiTygsabuu6Lk7s0SDxj4tIioQaNaLbKf9szL/G7JHVtWSK/8vK4jN?= =?us-ascii?Q?1bcJNDE8+YXwMHcbjIHmtdEUqttvFUY=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 10c1d0e6-1e01-46f4-c96b-08df3c4cdf2e X-MS-Exchange-CrossTenant-AuthSource: PAXP251MB0394.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Nov 2026 21:28:17.2311 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: fyXCI9vjmcpso+2huu0ENNUNft8u1JniPoTRMWiZLJziCf6HZf7ExiMqKrYEuOs1W29E862d1gF8lisUyLUdnrNmlp1XX+WwyEko4q1UrKw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0169 X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: E7A84200B4C X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=2]; RCPT_COUNT_ONE(0.00)[1]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c201::1:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+]; NEURAL_SPAM(0.00)[0.596]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action X-Stat-Signature: i1kbmxseigo5ce8zyoxn9yduiojcjd8x X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,FORGED_SPF_HELO,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] zlib: Version bump. 1.3.2 -> 1.4 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false A bunch of security fixes of various tracking origin including CVEs. https://github.com/madler/zlib/releases/tag/v1.4 Plugs CVEs: CVE-2026-85091: gzwrite() buffer overflow CVE-2026-4738: inftree out-of-bounds pointer arithmetic Signed-off-by: Christian Melki --- rules/zlib.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/zlib.make b/rules/zlib.make index 0960b0f65..2e4ad8715 100644 --- a/rules/zlib.make +++ b/rules/zlib.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_ZLIB) += zlib # Paths and names # -ZLIB_VERSION := 1.3.2 -ZLIB_SHA256 := d7a0654783a4da529d1bb793b7ad9c3318020af77667bcae35f95d0e42a792f3 +ZLIB_VERSION := 1.4 +ZLIB_SHA256 := 4f11c512053d7bab8d9e9b89bde3575add3e4c50a383b42ef6cb837035fc5a7c ZLIB := zlib-$(ZLIB_VERSION) ZLIB_SUFFIX := tar.xz ZLIB_URL := \ -- 2.43.0