From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 15 Nov 2022 11:09:48 +0100 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1oust2-008A3U-Kt for lore@lore.pengutronix.de; Tue, 15 Nov 2022 11:09:48 +0100 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1oust1-0002im-K6; Tue, 15 Nov 2022 11:09:47 +0100 Received: from ptx.hi.pengutronix.de ([2001:67c:670:100:1d::c0]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oust0-0002id-43; Tue, 15 Nov 2022 11:09:46 +0100 Received: from rhi by ptx.hi.pengutronix.de with local (Exim 4.92) (envelope-from ) id 1oussz-0007Cz-RT; Tue, 15 Nov 2022 11:09:45 +0100 Date: Tue, 15 Nov 2022 11:09:45 +0100 From: Roland Hieber To: "Joshi, Pranay" Message-ID: <20221115100945.webhdclnoppagp7j@pengutronix.de> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: NeoMutt/20180716 Subject: Re: [DistroKit] For zlib-1.2.12.tar.xz X-BeenThere: distrokit@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: "distrokit@pengutronix.de" Sender: "DistroKit" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: distrokit-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false On Fri, Nov 04, 2022 at 07:10:28AM +0000, Joshi, Pranay wrote: > Hi, > > We want zlib library for building a Distrokit next branch to prepare an image using ptxdist tool in Linux, can you please provide "zlib-1.2.12.tar.xz" > > We can only be able to find .gz this version of zlib in https://zlib.net/fossils/. That is unfortunate… It seems like zlib 1.2.12 was intentionally unpublished, probably because of CVE-2022-37434, which was fixed in zlib 1.2.13. I also cannot find any mirror still serving the old version… but you should be able to use 1.2.13 instead. You can try installing ptxdist-2022.10.0, which includes the newer zlib version, and update via `ptxdist-2022.10.0 migrate`. Until DistroKit is updated to the new PTXDist version, you can try overwriting the zlib version locally by putting the following text into rules/post/zlib.make in your DistroKit tree: ZLIB_VERSION := 1.2.13 ZLIB_MD5 := 7d9fc1d78ae2fa3e84fe98b77d006c63 ZLIB := zlib-$(ZLIB_VERSION) ZLIB_URL := http://zlib.net/$(ZLIB).$(ZLIB_SUFFIX) $(call ptx/mirror, SF, libpng/$(ZLIB).$(ZLIB_SUFFIX)) ZLIB_SOURCE := $(SRCDIR)/$(ZLIB).$(ZLIB_SUFFIX) ZLIB_DIR := $(BUILDDIR)/$(ZLIB) After that, `ptxdist print ZLIB` should output "zlib-1.2.13". - Roland -- Roland Hieber, Pengutronix e.K. | r.hieber@pengutronix.de | Steuerwalder Str. 21 | https://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |