https://ceph.io/en/news/blog/2022/v15-2-17-octopus-released/
fixes CVE-2022-0670

INTEL-SA-00657

see https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d

Since we build with CONFIG_SHADOW_PAGING=y

ref https://www.openwall.com/lists/oss-security/2022/07/23/1

Sent upstream:
http://lists.busybox.net/pipermail/busybox/2022-June/089768.html

(cherry picked from commit 4ffd996b)

ncurses does not keep old tarballs.. the github mirror ones are
file-identical (only file access time differs, actual file contents are
bit identical)