From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from enterprise03.smtp.diehl.com ([193.201.238.214]) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1fWGa6-0008R4-6b for ptxdist@pengutronix.de; Fri, 22 Jun 2018 09:34:06 +0200 From: Denis OSTERLAND Date: Fri, 22 Jun 2018 07:34:05 +0000 Message-ID: <1529652844.4757.6.camel@diehl.com> References: <20180621112156.18333-1-Denis.Osterland@diehl.com> <20180622071516.scs63brk76n5u4ef@pengutronix.de> In-Reply-To: <20180622071516.scs63brk76n5u4ef@pengutronix.de> MIME-Version: 1.0 Content-Language: en-US Content-ID: Subject: Re: [ptxdist] [PATCH] libxml2: apply fix for CVE-2017-8872 List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: "ptxdist@pengutronix.de" QW0gRnJlaXRhZywgZGVuIDIyLjA2LjIwMTgsIDA5OjE1ICswMjAwIHNjaHJpZWIgTWljaGFlbCBP bGJyaWNoOg0KPiA+ICsNCj4gPiArT3JpZ2luOiB2ZW5kb3IsIGh0dHBzOi8vYnVnemlsbGEubm92 ZWxsLmNvbS9hdHRhY2htZW50LmNnaT9pZD03MzIzMDkNCj4gPiArQnVnOiBodHRwczovL2J1Z3pp bGxhLmdub21lLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Nzc1MjAwDQo+ID4gK0J1Zy1EZWJpYW46IGh0 dHBzOi8vYnVncy5kZWJpYW4ub3JnLzg2MjQ1MA0KPiA+ICtCdWctRGViaWFuLVNlY3VyaXR5OiBo dHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NWRS0yMDE3LTg4NzIN Cj4gPiArQnVnLVNVU0U6IGh0dHBzOi8vYnVnemlsbGEubm92ZWxsLmNvbS9zaG93X2J1Zy5jZ2k/ aWQ9MTAzODQ0NA0KPiA+ICtGb3J3YXJkZWQ6IHllcywgaHR0cHM6Ly9idWd6aWxsYS5nbm9tZS5v cmcvYXR0YWNobWVudC5jZ2k/aWQ9MzY2MTkzDQo+ID4gK1Jldmlld2VkLWJ5OiBTYWx2YXRvcmUg Qm9uYWNjb3JzbyA8Y2FybmlsQGRlYmlhbi5vcmc+DQo+ID4gK0xhc3QtVXBkYXRlOiAyMDE4LTAx LTAzDQo+ID4gKy0tLQ0KPiA+IGRpZmYgLS1naXQgYS9wYXRjaGVzL2xpYnhtbDItMi45Ljcvc2Vy aWVzIGIvcGF0Y2hlcy9saWJ4bWwyLTIuOS43L3Nlcmllcw0KPiA+IGluZGV4IDA1YmE1ZGRlYS4u ZGNmMGRiYWZjIDEwMDY0NA0KPiA+IC0tLSBhL3BhdGNoZXMvbGlieG1sMi0yLjkuNy9zZXJpZXMN Cj4gPiArKysgYi9wYXRjaGVzL2xpYnhtbDItMi45Ljcvc2VyaWVzDQo+ID4gQEAgLTEsNiArMSw3 IEBADQo+ID4gwqAjIGdlbmVyYXRlZCBieSBnaXQtcHR4LXBhdGNoZXMNCj4gPiAtI3RhZzpiYXNl IC0tc3RhcnQtbnVtYmVyIDENCj4gPiDCoCN0YWc6dXBzdHJlYW0gLS1zdGFydC1udW1iZXIgMQ0K PiA+IMKgI3RhZzpwdHggLS1zdGFydC1udW1iZXIgMjAwDQo+ID4gwqAwMjAwLXhtbDItY29uZmln LWlzLW5vdC1TWVNST09ULWF3YXJlLnBhdGNoDQo+ID4gLSMgYjY3MjBiZTk1NmQxYjQ2MTliYzFj MzQ3YTBjZWIxZGTCoMKgLSBnaXQtcHR4LXBhdGNoZXMgbWFnaWMNCj4gPiArI3RhZzpiYXNlIC0t c3RhcnQtbnVtYmVyIDENCj4gPiArMDAwMS1PdXQtb2YtYm91bmRzLXJlYWQtaW4taHRtbFBhcnNl VHJ5T3JGaW5pc2gucGF0Y2gNCj4gVGhhdCdzIGFuIHVwc3RyZWFtIHBhdGNoLCByaWdodD8gSXQg c2hvdWxkIGNvbWUgYmVmb3JlIHRoZSBvdGhlciBwYXRjaCBpbg0KPiB0aGUgJ3Vwc3RyZWFtJyBz ZWN0aW9uLg0KPiANCj4gTWljaGFlbA0KRGViaWFuIHNlbmQgdGhpcyBwYXRjaCB0byB0aGUgZGV2 ZWxvcGVycywgeWVzLg0KVGhlIGhhdmUgbm90IHlldCBhcHBsaWVkIGl0Lg0KSSB3aWxsIG1vdmUg aXQgdG8gdXBzdHJlYW0uDQpEbyB5b3UgaGF2ZSBwcmVmZXJlbmNlcyBhYm91dCBwYXRjaC1udW1i ZXJzPw0KTXkgc3VnZ2VzdGlvbiB3b3VsZCBiZToNCnRhZzp1cHN0cmVhbSAtLXN0YXJ0LW51bWJl ciAxMDANCnRhZzpwdHggLS1zdGFydC1udW1iZXIgMjAwDQp0YWc6YmFzZSAtLXN0YXJ0LW51bWJl ciAxDQoNClJlZ2FyZHMgRGVuaXMNCj4gPiANCj4gPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiA+IHB0eGRpc3QgbWFpbGluZyBsaXN0DQo+ID4gcHR4 ZGlzdEBwZW5ndXRyb25peC5kZQ0KRGllaGwgQUtPIFN0aWZ0dW5nICYgQ28uIEtHLCBQZmFubmVy c3RyYcOfZSA3NS04MywgODgyMzkgV2FuZ2VuIGltIEFsbGfDpHUNCkJlcmVpY2hzdm9yc3RhbmQ6 IERpcGwuLUluZy4gTWljaGFlbCBTaWVkZW50b3AgKFNwcmVjaGVyKSwgSm9zZWYgRmVsbG5lciAo TWl0Z2xpZWQpDQpTaXR6IGRlciBHZXNlbGxzY2hhZnQ6IFdhbmdlbiBpLkEuIOKAkyBSZWdpc3Rl cmdlcmljaHQ6IEFtdHNnZXJpY2h0IFVsbSBIUkEgNjIwNjA5IOKAkyBQZXJzw7ZubGljaCBoYWZ0 ZW5kZSBHZXNlbGxzY2hhZnRlcmluOiBEaWVobCBWZXJ3YWx0dW5ncy1TdGlmdHVuZyDigJMgU2l0 ejogTsO8cm5iZXJnIOKAkyBSZWdpc3RlcmdlcmljaHQ6IEFtdHNnZXJpY2h0IE7DvHJuYmVyZyBI UkEgMTE3NTYg4oCTDQpWb3JzdGFuZDogRHIuLUluZy4gS2FybCBUcmFnbCAoVm9yc2l0emVuZGVy KSwgSGVyciBEaXBsLi1XaXJ0c2NoLi1JbmcuIFdvbGZnYW5nIFdlZ2dlbiAoc3RlbGx2ZXJ0cmV0 ZW5kZXIgVm9yc2l0emVuZGVyKSwgRGlwbC4tS2ZtLiBDbGF1cyBHw7xudGhlciwgRGlwbC4tS2Zt LiBGcmFuayBHdXR6ZWl0LCBEci4tSW5nLiBIZWlucmljaCBTY2h1bmssIERyLi1JbmcuIE1pY2hh ZWwgU2llZGVudG9wICwgRGlwbC4tS2ZtLiBEci4tSW5nLiBNYXJ0aW4gU29tbWVyLCBEaXBsLi1J bmcuIChGSCkgUmFpbmVyIHZvbiBCb3JzdGVsLCBWb3JzaXR6ZW5kZXIgZGVzIEF1ZnNpY2h0c3Jh dGVzOiBEci4gS2xhdXMgTWFpZXINCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KRGVyIEluaGFsdCBkZXIgdm9yc3RlaGVuZGVuIEUtTWFpbCBpc3QgbmljaHQgcmVj aHRsaWNoIGJpbmRlbmQuIERpZXNlIEUtTWFpbCBlbnRoYWVsdCB2ZXJ0cmF1bGljaGUgdW5kL29k ZXIgcmVjaHRsaWNoIGdlc2NodWV0enRlIEluZm9ybWF0aW9uZW4uDQpJbmZvcm1pZXJlbiBTaWUg dW5zIGJpdHRlLCB3ZW5uIFNpZSBkaWVzZSBFLU1haWwgZmFlbHNjaGxpY2hlcndlaXNlIGVyaGFs dGVuIGhhYmVuLiBCaXR0ZSBsb2VzY2hlbiBTaWUgaW4gZGllc2VtIEZhbGwgZGllIE5hY2hyaWNo dC4gSmVkZSB1bmVybGF1YnRlIEZvcm0gZGVyIFJlcHJvZHVrdGlvbiwgQmVrYW5udGdhYmUsIEFl bmRlcnVuZywgVmVydGVpbHVuZyB1bmQvb2RlciBQdWJsaWthdGlvbiBkaWVzZXIgRS1NYWlsIGlz dCBzdHJlbmdzdGVucyB1bnRlcnNhZ3QuDQpUaGUgY29udGVudHMgb2YgdGhlIGFib3ZlIG1lbnRp b25lZCBlLW1haWwgaXMgbm90IGxlZ2FsbHkgYmluZGluZy4gVGhpcyBlLW1haWwgY29udGFpbnMg Y29uZmlkZW50aWFsIGFuZC9vciBsZWdhbGx5IHByb3RlY3RlZCBpbmZvcm1hdGlvbi4gUGxlYXNl IGluZm9ybSB1cyBpZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGUtbWFpbCBieSBtaXN0YWtlIGFu ZCBkZWxldGUgaXQgaW4gc3VjaCBhIGNhc2UuIEVhY2ggdW5hdXRob3JpemVkIHJlcHJvZHVjdGlv biwgZGlzY2xvc3VyZSwgYWx0ZXJhdGlvbiwgZGlzdHJpYnV0aW9uIGFuZC9vciBwdWJsaWNhdGlv biBvZiB0aGlzIGUtbWFpbCBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcHR4ZGlzdCBtYWlsaW5nIGxpc3QKcHR4 ZGlzdEBwZW5ndXRyb25peC5kZQ==