* [ptxdist] [PATCH] libjpeg: Version bump. 3.2.0 -> 3.2.1
@ 2026-10-31 12:23 Christian Melki
2026-11-13 8:39 ` [ptxdist] [APPLIED] " Michael Olbrich
0 siblings, 1 reply; 2+ messages in thread
From: Christian Melki @ 2026-10-31 12:23 UTC (permalink / raw)
To: ptxdist
Mostly fixes.
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.1
Plugs CVE:
CVE-2026-75466: integer division-by-zero vulnerability in the PNG loader
Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
rules/libjpeg.make | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/rules/libjpeg.make b/rules/libjpeg.make
index ac06d7ee3..042f07e75 100644
--- a/rules/libjpeg.make
+++ b/rules/libjpeg.make
@@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBJPEG) += libjpeg
#
# Paths and names
#
-LIBJPEG_VERSION := 3.2.0
-LIBJPEG_SHA256 := 980dd81f425082aa6d7c9e47fef27554ce7a9ffc8e2f6e863b97d263c5c50858
+LIBJPEG_VERSION := 3.2.1
+LIBJPEG_SHA256 := 6f5819c51649bce2571a23b1b0cd41eae2f57fc3f8908c7ec9e7047efb65ca13
LIBJPEG_SUFFIX := tar.gz
LIBJPEG := libjpeg-turbo-$(LIBJPEG_VERSION)
LIBJPEG_URL := https://github.com/libjpeg-turbo/libjpeg-turbo/archive/refs/tags/$(LIBJPEG_VERSION).$(LIBJPEG_SUFFIX)
--
2.43.0
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [ptxdist] [APPLIED] libjpeg: Version bump. 3.2.0 -> 3.2.1
2026-10-31 12:23 [ptxdist] [PATCH] libjpeg: Version bump. 3.2.0 -> 3.2.1 Christian Melki
@ 2026-11-13 8:39 ` Michael Olbrich
0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2026-11-13 8:39 UTC (permalink / raw)
To: ptxdist; +Cc: Christian Melki
Thanks, applied as 21548aa94f4ecdd78f6a48f881277c11249ddfda.
Michael
[sent from post-receive hook]
On Fri, 13 Nov 2026 09:39:31 +0100, Christian Melki <christian.melki@t2data.com> wrote:
> Mostly fixes.
> https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.1
>
> Plugs CVE:
> CVE-2026-75466: integer division-by-zero vulnerability in the PNG loader
>
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20261031122359.1518714-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
>
> diff --git a/rules/libjpeg.make b/rules/libjpeg.make
> index ac06d7ee3fc2..042f07e75bda 100644
> --- a/rules/libjpeg.make
> +++ b/rules/libjpeg.make
> @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBJPEG) += libjpeg
> #
> # Paths and names
> #
> -LIBJPEG_VERSION := 3.2.0
> -LIBJPEG_SHA256 := 980dd81f425082aa6d7c9e47fef27554ce7a9ffc8e2f6e863b97d263c5c50858
> +LIBJPEG_VERSION := 3.2.1
> +LIBJPEG_SHA256 := 6f5819c51649bce2571a23b1b0cd41eae2f57fc3f8908c7ec9e7047efb65ca13
> LIBJPEG_SUFFIX := tar.gz
> LIBJPEG := libjpeg-turbo-$(LIBJPEG_VERSION)
> LIBJPEG_URL := https://github.com/libjpeg-turbo/libjpeg-turbo/archive/refs/tags/$(LIBJPEG_VERSION).$(LIBJPEG_SUFFIX)
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-11-13 8:41 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-10-31 12:23 [ptxdist] [PATCH] libjpeg: Version bump. 3.2.0 -> 3.2.1 Christian Melki
2026-11-13 8:39 ` [ptxdist] [APPLIED] " Michael Olbrich
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox