From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 02 Oct 2026 10:37:20 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xCYlc-008m63-0X for lore@lore.pengutronix.de; Fri, 02 Oct 2026 10:37:20 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xCYlb-0001hu-JD; Fri, 02 Oct 2026 10:37:19 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xCYlO-0001hd-DE for ptxdist@pengutronix.de; Fri, 02 Oct 2026 10:37:06 +0200 Received: from drehscheibe.grey.stw.pengutronix.de (drehscheibe.grey.stw.pengutronix.de [IPv6:2a0a:edc0:0:c01:1d::a2]) (Authenticated sender: relay-from-drehscheibe.grey.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 59A6C20196E for ; Fri, 02 Oct 2026 10:37:06 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1790930226; a=rsa-sha256; cv=none; b=EsB0ZUBXBJL5Jpprn5himBxtfznAIQdvmgmChjVxtr7dYXwOo0wUPmD6ddxzekL7JtjjMT 2zlevWt0HReSJoxbq48JVKGVfmg50c96G2w3ft6kwawAxd9rYa/ke7ANe8t9VM3DgmX5lQ 4R/iAwndgTCSyP0u34LPRqbi3c0cFkvDin3GkdxAEmElu8y15rbyC2XnTWl4VQHjk+cYS0 2Kutx3y7S2XmhONC1HFupefbjY3s2TiPs5v8s0kLaMVZiOK17w1/W14a6449rF87PLiqYU Il6A94JjE5gtFqZ8YImoydoJc+4Gy8YJrkLmXsQpXB7i29MHRkOCgu56LB8DIg== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-drehscheibe.grey.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1790930226; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=D6HOynYNFYbmzVC6HhmnPUqwLIs02isa6lGY5o9Xje8=; b=LvhapJNO9SP1Xny3bZh/0nUmQ9vK8d8tUAWQzyvQq7ynOkwTp9j6fDTE58mqlxchCX1nAm bywsven/4Nt/sM8j/sPsyXgyn2YKtBG/qKYows7E00YZVKSY7DUifvUAQRa3Ln0N3OJMf+ mR/Hs0d6b5nZuDpObnqdivIF32QN4ZS1lvS+j4tEFGIoR9nrEdi/UG1O1xMXnAHI4Zf1E9 DIw8mVQcG/ycQyBgTFz44+LbDkfpIDlTBTcLVnLxqpJantS/15YEeJ/8SwYmFrrCsuut5s pphjdl4X7DzNVpOd/tkXyEo04cMGUOrNtRX85cISNAlcxHncYORNuIrYy7V/Gg== Received: from pty.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::c5]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xCYlO-003rcr-0p for ptxdist@pengutronix.de; Fri, 02 Oct 2026 10:37:06 +0200 Received: from mol by pty.whiteo.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1xCYlO-00000007ATa-0gcg for ptxdist@pengutronix.de; Fri, 02 Oct 2026 10:37:06 +0200 Date: Fri, 2 Oct 2026 10:37:06 +0200 From: Michael Olbrich To: ptxdist@pengutronix.de Message-ID: Mail-Followup-To: ptxdist@pengutronix.de MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vduWgZxNQb80YDDC" Content-Disposition: inline X-Sent-From: Pengutronix Hildesheim X-URL: http://www.pengutronix.de/ X-Accept-Language: de,en X-Accept-Content-Type: text/plain X-IRC: #ptxdist @freenode Subject: [ptxdist] [ANNOUNCE] PTXdist 2026.10.0 released X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false --vduWgZxNQb80YDDC Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I'm happy to announce that I've just released ptxdist-2026.10.0. This release contains some SPDX SBoM fixes and several CPE identifier corrections to ensure that they match what the CVE database is using. That way CVEs are properly matched, when using the SBoM generated by PTXdist. The rest are mostly version bumps and a few other fixes. Thanks to all contributors and - as always - the shortlog below. Enjoy, Michael Olbrich Alexander Dahl (26): libnftnl: version bump 1.3.1 -> 1.3.2 nftables: version bump 1.1.6 -> 1.1.7 report: spdx_sbom: Fixed "created" field format report: spdx_sbom: Fix externalPackageRef type in category SECURITY report: spdx_sbom: Convert pkg_name into valid idstring tz: version bump 2026c -> 2026d at91bootstrap2: Add matching CPE identifiers bzip2: Add matching CPE identifiers coreutils: Add matching CPE identifiers ethtool: Add matching CPE identifiers fcgi: Add matching CPE identifiers flex: Add matching CPE identifiers iperf3: Add matching CPE identifiers libarchive: Add matching CPE identifiers libgmp: Add matching CPE identifiers libmodbus: Add CPE identifiers libnl3: Reorder variables and re-add section header comment libnl3: Add matching CPE identifiers libpopt: Add matching CPE identifiers ncurses: Add matching CPE identifiers nlohmann-json: Add matching CPE identifiers openssl: Pin down CPE vendor sudo: Add matching CPE identifiers u-boot: Add matching CPE identities u-boot-tools: Add matching CPE identifiers zlib: Pin down CPE vendor Bruno Thomsen (2): host-system-python3: add dtschema kernel: validate device trees against the DT schema Christian Melki (19): qemu: Version bump. 11.1.0 -> 11.1.1 orc: Version bump. 0.4.42 -> 0.4.43 libslirp: Version bump. 4.9.3 -> 4.9.4 iproute2: Version bump. 7.1.0 -> 7.2.0 expat: Version bump. 2.8.3 -> 2.8.4 pcre2: Version bump. 10.47 -> 10.48. libcurl: Version bump. 8.21.0 -> 8.22.0 host-libcurl: Follow target libcurl bump 8.21.0 -> 8.22.0 util-linux: Version bump. 2.42.2 -> 2.42.3 libxml2: Version bump 2.15.3 -> 2.15.4 libpcap: Version bump. 1.10.6 -> 1.10.7 chrony: Version bump. 4.8 -> 4.9 glib: Version bump. 2.88.3 -> 2.90.0 orc: Version bump. 0.4.43 -> 0.4.44 libcap-ng: Version bump. 0.9.5 -> 0.9.6 linux-firmware: Version bump. 20260810 -> 20260910 libtirpc: Version bump. 1.3.7 -> 1.3.8 libpcap: Version bump. 1.10.7 -> 1.11.0 libinput: Version bump. 1.31.3 -> 1.32.0 Michael Olbrich (12): gstreamer1: version bump 1.28.2 -> 1.28.7 gst-plugins-base1: version bump 1.28.2 -> 1.28.7 gst-plugins-good1: version bump 1.28.2 -> 1.28.7 gst-plugins-bad1: version bump 1.28.2 -> 1.28.7 gst-devtools1: version bump 1.28.2 -> 1.28.7 gst-libav1: version bump 1.28.2 -> 1.28.7 gst-plugins-ugly1: version bump 1.28.2 -> 1.28.7 gst-python1: version bump 1.28.2 -> 1.28.7 gst-rtsp-server1: version bump 1.28.2 -> 1.28.7 gst-plugins-rs: version bump 0.15.1 -> 1.28.7 expat: disable xml-attr-info glibmm: version bump 2.78.1 -> 2.90.0 Sven P=C3=BCschel (3): wpa_supplicant: version bump 2.11 -> 2.12 wireplumber: version bump 0.5.14 -> 0.5.17 valgrind: version bump 3.26.0 -> 3.27.1 --=20 Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 | --vduWgZxNQb80YDDC Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCgAdFiEEeJFGjgcONlOX5bZuzXDjm1IAhs8FAmq/bS4ACgkQzXDjm1IA hs9mpwf/Qpg1lfNE+HFn3hUM24hChHGlEPem7hKx7Hgqo5FClIWWjZIO9Cfda8VQ 99X3Bj4Tl9RuZbaefL2OVRfEjc8In3pYBgZaPg4zpAMul3ZQVHb27cWHbxB2FZ+Z 5utKFk2RDfweemlQQGPz8HgqxLg/LFqjMjCbYx7gb/4yuc3Ptk7zW5EJSG3JmnOr 7LBDNGnGqXtqmw4AbaxVMeZhFAt/jwm6de/XXyry6GjB6ao11HGs53kR/AOAWyHX KR+RZZXfICJOAZhDZzJoG8McDHGVro+yvzU7cid8Xm+7e4DEnnKL4p03Lr9Aw16A VULpnL/1QaU1MRct66NMelcaDZCxZA== =A0XH -----END PGP SIGNATURE----- --vduWgZxNQb80YDDC--