From patchwork Thu Aug 13 18:38:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10157 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4hLZ144LrTz3wqM for ; Thu, 13 Aug 2026 18:40:24 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hLZ0w33rLz7Km for ; Thu, 13 Aug 2026 18:40:16 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hLYzs1Sq2z36XV for ; Thu, 13 Aug 2026 18:39:21 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hLYzp4cXPz2ybk for ; Thu, 13 Aug 2026 18:39:18 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hLYzf3Kvrz33w; Thu, 13 Aug 2026 18:39:10 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1786646350; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/P76q76HwgYwsrJRSAPz/JWIRjV2Z3hnViccjWWFwyk=; b=3ZdIBm+2VXVoNwodljN35cxpCkZOjQqwWTonpc0f8cQAsF3HBK1eS9WleMiZJ5Q9+TTogi 072I2r8b1fBxj6CA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1786646350; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/P76q76HwgYwsrJRSAPz/JWIRjV2Z3hnViccjWWFwyk=; b=sqTEZGL4mg+X8t4HAyVQPOZwjwpp2Mjvw0cfnGbpTdz9obEqWHJRRi/gPV9/vPviHqJLQt mufhUp2Mj8W5GHZewG1ySfyJL67F9o5/lUf/3D+W7/UyggndCPUGhu9JQp3bVwRsOWL1qF D6ivjKQmvYYiHDoJRVM+hOwu50o+9B6MiHeSUibIK90Zx1TgL4nO6pklukqkS4s6RFbGU5 294FKsdB2EDFoSZjgqYTwxI1zBhfez3BbV93I4DtITdr/GxTIFP3xWYkImoU6A4LVB+GPs VqwVkP/jQyiYr43lJP2GVcBTSWMIybYEoTREknWUilFNY8ceFNQGnhfddN71Cg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libmicrohttpd: Update to version 1.0.10 Date: Thu, 13 Aug 2026 20:38:57 +0200 Message-ID: <20260813183858.2075657-2-adolf.belka@ipfire.org> In-Reply-To: <20260813183858.2075657-1-adolf.belka@ipfire.org> References: <20260813183858.2075657-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.0.5 to 1.0.10 - Update of rootfile - Various fixes for vulnerabilities - Changelog 1.0.10 Fix race in thread-per-connection mode on wake-up signal between daemon and thread that could result in lost wake-ups and thus connections that did not finish processing. Fix rare assertion failure in relation to suspend-and-resume processing (harmless if assertions were turned off). Releasing GNU libmicrohttpd 1.0.10. -CG 1.0.9 Enfocing a minimal size on the PSK. Fix support for red zones in memorypool. Fix rare over-writing of HTTP version string with network data after parsing header. Fix rare crash from adding connection manually followed by immediate daemon shutdown. Releasing GNU libmicrohttpd 1.0.9. -CG 1.0.8 Fixing additional vulnerabilities inspired by reviewing the code for similar issues like the ones reported by A. Ramos; expand the test suite to cover these and other issues. Releasing GNU libmicrohttpd 1.0.8. -CG 1.0.7 Fixing various vulnerabilities reported by A. Ramos resulting in possible crashes or out-of-bounds stack writes for certain requests in specific configurations. Releasing GNU libmicrohttpd 1.0.7. -CG 1.0.6 Fix various minor issues, like theoretical integer overflows for extreme inputs or NULL dereferences if the application passes NULL where it should not. Releasing GNU libmicrohttpd 1.0.6. -CG Signed-off-by: Adolf Belka --- config/rootfiles/packages/libmicrohttpd | 2 +- lfs/libmicrohttpd | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/packages/libmicrohttpd b/config/rootfiles/packages/libmicrohttpd index b78560c7b..b7a98f7e8 100644 --- a/config/rootfiles/packages/libmicrohttpd +++ b/config/rootfiles/packages/libmicrohttpd @@ -2,5 +2,5 @@ #usr/lib/libmicrohttpd.la #usr/lib/libmicrohttpd.so usr/lib/libmicrohttpd.so.12 -usr/lib/libmicrohttpd.so.12.62.3 +usr/lib/libmicrohttpd.so.12.62.8 #usr/lib/pkgconfig/libmicrohttpd.pc diff --git a/lfs/libmicrohttpd b/lfs/libmicrohttpd index 2ec042d9a..ec75eba0d 100644 --- a/lfs/libmicrohttpd +++ b/lfs/libmicrohttpd @@ -26,7 +26,7 @@ include Config SUMMARY = Small C library to easily run an HTTP server as part of an application -VER = 1.0.5 +VER = 1.0.10 THISAPP = libmicrohttpd-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = libmicrohttpd -PAK_VER = 3 +PAK_VER = 4 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = dd6ea96a4ab94925d041ef4c45066bf8fb5568c93a727e93295d69db5432ef498d72138f1c64fe157327aca8f97636c9140757c1c048e589d91fddc8ff83a119 +$(DL_FILE)_BLAKE2 = bf7885a0c48ca5e5a0543aa518ec004e47c60dd9f812a06914cf97b3f95fe0a972a9a24a84a402fd63e480bc096fc7cd67f8366ea6df7e6e438f18cc0448f2fc install : $(TARGET)