Skip to content

Commit 1a135d4

Browse files
committed
suggest to use the next-to-be-released musl version
1 parent ca915bf commit 1a135d4

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

docs/reference-manual/native-image/guides/build-static-and-mostly-static-executable.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -32,20 +32,21 @@ The easiest way to install GraalVM is with [SDKMAN!](https://sdkman.io/jdks#graa
3232
For other installation options, visit the [Downloads section](https://www.graalvm.org/downloads/).
3333

3434
To create statically linked applications with Native Image, you require a `musl` toolchain with the `zlib` library.
35-
For the best compatibility, use [musl-1.2.4](https://musl.libc.org/releases/musl-1.2.4.tar.gz) or later.
36-
We recommend building `musl` from [source](https://musl.libc.org/) as shown below:
35+
Use the latest or a recent version of musl (all versions prior and including `1.2.5` are affected by [CVE-2025-26519](https://www.openwall.com/lists/musl/2025/02/13/1)).
36+
The steps to building `musl` from [source](https://musl.libc.org/) are as shown below.
37+
The example assumes you are using [musl-1.2.6](https://musl.libc.org/releases/musl-1.2.6.tar.gz).
3738

3839
```bash
3940
# Specify an installation directory for musl:
4041
export MUSL_HOME=$PWD/musl-toolchain
4142

4243
# Download musl and zlib sources:
43-
curl -O https://musl.libc.org/releases/musl-1.2.4.tar.gz
44+
curl -O https://musl.libc.org/releases/musl-1.2.6.tar.gz
4445
curl -O https://zlib.net/fossils/zlib-1.2.13.tar.gz
4546

4647
# Build musl from source
47-
tar -xzvf musl-1.2.4.tar.gz
48-
pushd musl-1.2.4
48+
tar -xzvf musl-1.2.6.tar.gz
49+
pushd musl-1.2.6
4950
./configure --prefix=$MUSL_HOME --static
5051
# The next operation may require privileged access to system resources, so use sudo
5152
sudo make && make install

0 commit comments

Comments
 (0)