A bunch of security fixes of various tracking origin including CVEs. https://github.com/madler/zlib/releases/tag/v1.4
Plugs CVEs: CVE-2026-85091: gzwrite() buffer overflow CVE-2026-4738: inftree out-of-bounds pointer arithmetic Signed-off-by: Christian Melki <[email protected]> --- rules/zlib.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/zlib.make b/rules/zlib.make index 0960b0f65..2e4ad8715 100644 --- a/rules/zlib.make +++ b/rules/zlib.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_ZLIB) += zlib # Paths and names # -ZLIB_VERSION := 1.3.2 -ZLIB_SHA256 := d7a0654783a4da529d1bb793b7ad9c3318020af77667bcae35f95d0e42a792f3 +ZLIB_VERSION := 1.4 +ZLIB_SHA256 := 4f11c512053d7bab8d9e9b89bde3575add3e4c50a383b42ef6cb837035fc5a7c ZLIB := zlib-$(ZLIB_VERSION) ZLIB_SUFFIX := tar.xz ZLIB_URL := \ -- 2.43.0
