similarity index 85%
rename from meta/recipes-core/zlib/zlib_1.3.2.bb
rename to meta/recipes-core/zlib/zlib_1.4.bb
@@ -12,16 +12,13 @@ SRC_URI = "https://zlib.net/${BP}.tar.gz \
"
UPSTREAM_CHECK_URI = "http://zlib.net/"
-SRC_URI[sha256sum] = "bb329a0a2cd0274d05519d61c667c062e06990d72e125ee2dfa8de64f0119d16"
+SRC_URI[sha256sum] = "02dd159783677a749c04adbdd02b55b8a2bcc7e054f51b76b549199a916ad584"
# When a new release is made the previous release is moved to fossils/, so add this
# to PREMIRRORS so it is also searched automatically.
PREMIRRORS:append = " https://zlib.net/ https://zlib.net/fossils/"
CFLAGS += "-D_REENTRANT -fPIE"
-# zlib does not build with lld, keep it until https://github.com/madler/zlib/pull/936
-# is addressed
-LDFLAGS:append = " -fuse-ld=bfd"
RDEPENDS:${PN}-ptest += "make"
Bug fix and security release. It fixes CVE-2026-85091, a heap buffer overflow in gzwrite(), and several inflate, deflate and gzread issues. Drop the -fuse-ld=bfd workaround. 1.4 fixes the configure test that failed with lld 17+ (upstream commit 6ddc2d0, "Fix configure when using zlib.map with some linkers"). PR #936, named in the old comment, is about --zprefix builds, which we don't use. License checksum is unchanged. Changelog: https://github.com/madler/zlib/blob/v1.4/ChangeLog AI-Generated: Uses Claude Signed-off-by: Prasanth R <prasanth.r@lineo.co.jp> --- Notes: v2: zlib 1.4 is out, so upgrade instead of the backport (Peter), and mark CVE-2026-76844 cpe-incorrect in a separate patch (Paul). Also drop the lld workaround: tested a 1.4 build with gcc + ld.lld, same exported symbols as with bfd. ptest passes on Test. meta/recipes-core/zlib/{zlib_1.3.2.bb => zlib_1.4.bb} | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) rename meta/recipes-core/zlib/{zlib_1.3.2.bb => zlib_1.4.bb} (85%)