From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from enterprise03.smtp.diehl.com ([193.201.238.214]) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1fVxi4-0006OP-Ui for ptxdist@pengutronix.de; Thu, 21 Jun 2018 13:25:05 +0200 From: Denis OSTERLAND Date: Thu, 21 Jun 2018 11:25:03 +0000 Message-ID: <20180621112156.18333-1-Denis.Osterland@diehl.com> MIME-Version: 1.0 Content-Language: en-US Subject: [ptxdist] [PATCH] libxml2: apply fix for CVE-2017-8872 List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: "ptxdist@pengutronix.de" VGFrZW4gZnJvbSBkZWJpYW4gYnVzdGVyIGxpYnhtbDJfMi45LjcrZGZzZy0xLgoKU2lnbmVkLW9m Zi1ieTogRGVuaXMgT3N0ZXJsYW5kIDxEZW5pcy5Pc3RlcmxhbmRAZGllaGwuY29tPgotLS0KIC4u Li1ib3VuZHMtcmVhZC1pbi1odG1sUGFyc2VUcnlPckZpbmlzaC5wYXRjaCB8IDMxICsrKysrKysr KysrKysrKysrKysKIHBhdGNoZXMvbGlieG1sMi0yLjkuNy9zZXJpZXMgICAgICAgICAgICAgICAg ICB8ICA1ICstLQogMiBmaWxlcyBjaGFuZ2VkLCAzNCBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9u cygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHBhdGNoZXMvbGlieG1sMi0yLjkuNy8wMDAxLU91dC1v Zi1ib3VuZHMtcmVhZC1pbi1odG1sUGFyc2VUcnlPckZpbmlzaC5wYXRjaAoKZGlmZiAtLWdpdCBh L3BhdGNoZXMvbGlieG1sMi0yLjkuNy8wMDAxLU91dC1vZi1ib3VuZHMtcmVhZC1pbi1odG1sUGFy c2VUcnlPckZpbmlzaC5wYXRjaCBiL3BhdGNoZXMvbGlieG1sMi0yLjkuNy8wMDAxLU91dC1vZi1i b3VuZHMtcmVhZC1pbi1odG1sUGFyc2VUcnlPckZpbmlzaC5wYXRjaApuZXcgZmlsZSBtb2RlIDEw MDY0NAppbmRleCAwMDAwMDAwMDAuLmMyM2NiNDdlNQotLS0gL2Rldi9udWxsCisrKyBiL3BhdGNo ZXMvbGlieG1sMi0yLjkuNy8wMDAxLU91dC1vZi1ib3VuZHMtcmVhZC1pbi1odG1sUGFyc2VUcnlP ckZpbmlzaC5wYXRjaApAQCAtMCwwICsxLDMxIEBACitGcm9tOiBNYXJjdXMgTWVpc3NuZXIgPG1l aXNzbmVyQHN1c2UuZGU+CitEYXRlOiBXZWQsIDMgSmFuIDIwMTggMTQ6NDM6NDEgKzAxMDAKK1N1 YmplY3Q6IFtQQVRDSF0gT3V0LW9mLWJvdW5kcyByZWFkIGluIGh0bWxQYXJzZVRyeU9yRmluaXNo CisKK09yaWdpbjogdmVuZG9yLCBodHRwczovL2J1Z3ppbGxhLm5vdmVsbC5jb20vYXR0YWNobWVu dC5jZ2k/aWQ9NzMyMzA5CitCdWc6IGh0dHBzOi8vYnVnemlsbGEuZ25vbWUub3JnL3Nob3dfYnVn LmNnaT9pZD03NzUyMDAKK0J1Zy1EZWJpYW46IGh0dHBzOi8vYnVncy5kZWJpYW4ub3JnLzg2MjQ1 MAorQnVnLURlYmlhbi1TZWN1cml0eTogaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5v cmcvdHJhY2tlci9DVkUtMjAxNy04ODcyCitCdWctU1VTRTogaHR0cHM6Ly9idWd6aWxsYS5ub3Zl bGwuY29tL3Nob3dfYnVnLmNnaT9pZD0xMDM4NDQ0CitGb3J3YXJkZWQ6IHllcywgaHR0cHM6Ly9i dWd6aWxsYS5nbm9tZS5vcmcvYXR0YWNobWVudC5jZ2k/aWQ9MzY2MTkzCitSZXZpZXdlZC1ieTog U2FsdmF0b3JlIEJvbmFjY29yc28gPGNhcm5pbEBkZWJpYW4ub3JnPgorTGFzdC1VcGRhdGU6IDIw MTgtMDEtMDMKKy0tLQorIHBhcnNlci5jIHwgNCArKysrCisgMSBmaWxlIGNoYW5nZWQsIDQgaW5z ZXJ0aW9ucygrKQorCitkaWZmIC0tZ2l0IGEvcGFyc2VyLmMgYi9wYXJzZXIuYworaW5kZXggMWM1 ZTAzNmVhMjY1Li4wMjUxMTEwNjdhZTggMTAwNjQ0CistLS0gYS9wYXJzZXIuYworKysrIGIvcGFy c2VyLmMKK0BAIC0xMjQ2Nyw2ICsxMjQ2NywxMCBAQCB4bWxIYWx0UGFyc2VyKHhtbFBhcnNlckN0 eHRQdHIgY3R4dCkgeworIAljdHh0LT5pbnB1dC0+Y3VyID0gQkFEX0NBU1QiIjsKKyAJY3R4dC0+ aW5wdXQtPmJhc2UgPSBjdHh0LT5pbnB1dC0+Y3VyOworICAgICAgICAgY3R4dC0+aW5wdXQtPmVu ZCA9IGN0eHQtPmlucHV0LT5jdXI7CisrICAgIGlmIChjdHh0LT5pbnB1dC0+YnVmKQorKyAgICAg ICAgeG1sQnVmRW1wdHkgKGN0eHQtPmlucHV0LT5idWYtPmJ1ZmZlcik7CisrICAgIGVsc2UKKysg ICAgICAgIGN0eHQtPmlucHV0LT5sZW5ndGggPSAwOworICAgICB9CisgfQorIApkaWZmIC0tZ2l0 IGEvcGF0Y2hlcy9saWJ4bWwyLTIuOS43L3NlcmllcyBiL3BhdGNoZXMvbGlieG1sMi0yLjkuNy9z ZXJpZXMKaW5kZXggMDViYTVkZGVhLi5kY2YwZGJhZmMgMTAwNjQ0Ci0tLSBhL3BhdGNoZXMvbGli eG1sMi0yLjkuNy9zZXJpZXMKKysrIGIvcGF0Y2hlcy9saWJ4bWwyLTIuOS43L3NlcmllcwpAQCAt MSw2ICsxLDcgQEAKICMgZ2VuZXJhdGVkIGJ5IGdpdC1wdHgtcGF0Y2hlcwotI3RhZzpiYXNlIC0t c3RhcnQtbnVtYmVyIDEKICN0YWc6dXBzdHJlYW0gLS1zdGFydC1udW1iZXIgMQogI3RhZzpwdHgg LS1zdGFydC1udW1iZXIgMjAwCiAwMjAwLXhtbDItY29uZmlnLWlzLW5vdC1TWVNST09ULWF3YXJl LnBhdGNoCi0jIGI2NzIwYmU5NTZkMWI0NjE5YmMxYzM0N2EwY2ViMWRkICAtIGdpdC1wdHgtcGF0 Y2hlcyBtYWdpYworI3RhZzpiYXNlIC0tc3RhcnQtbnVtYmVyIDEKKzAwMDEtT3V0LW9mLWJvdW5k cy1yZWFkLWluLWh0bWxQYXJzZVRyeU9yRmluaXNoLnBhdGNoCisjIDVhM2VkZTNlODA4NTljYjdi YzVjNjMwYmM3ZGJlNDNjICAtIGdpdC1wdHgtcGF0Y2hlcyBtYWdpYwotLSAKMi4xNy4xCgoKRGll aGwgQUtPIFN0aWZ0dW5nICYgQ28uIEtHLCBQZmFubmVyc3RyYcOfZSA3NS04MywgODgyMzkgV2Fu Z2VuIGltIEFsbGfDpHUKQmVyZWljaHN2b3JzdGFuZDogRGlwbC4tSW5nLiBNaWNoYWVsIFNpZWRl bnRvcCAoU3ByZWNoZXIpLCBKb3NlZiBGZWxsbmVyIChNaXRnbGllZCkKU2l0eiBkZXIgR2VzZWxs c2NoYWZ0OiBXYW5nZW4gaS5BLiDigJMgUmVnaXN0ZXJnZXJpY2h0OiBBbXRzZ2VyaWNodCBVbG0g SFJBIDYyMDYwOSDigJMgUGVyc8O2bmxpY2ggaGFmdGVuZGUgR2VzZWxsc2NoYWZ0ZXJpbjogRGll aGwgVmVyd2FsdHVuZ3MtU3RpZnR1bmcg4oCTIFNpdHo6IE7DvHJuYmVyZyDigJMgUmVnaXN0ZXJn ZXJpY2h0OiBBbXRzZ2VyaWNodCBOw7xybmJlcmcgSFJBIDExNzU2IOKAkwpWb3JzdGFuZDogRHIu LUluZy4gS2FybCBUcmFnbCAoVm9yc2l0emVuZGVyKSwgSGVyciBEaXBsLi1XaXJ0c2NoLi1Jbmcu IFdvbGZnYW5nIFdlZ2dlbiAoc3RlbGx2ZXJ0cmV0ZW5kZXIgVm9yc2l0emVuZGVyKSwgRGlwbC4t S2ZtLiBDbGF1cyBHw7xudGhlciwgRGlwbC4tS2ZtLiBGcmFuayBHdXR6ZWl0LCBEci4tSW5nLiBI ZWlucmljaCBTY2h1bmssIERyLi1JbmcuIE1pY2hhZWwgU2llZGVudG9wICwgRGlwbC4tS2ZtLiBE ci4tSW5nLiBNYXJ0aW4gU29tbWVyLCBEaXBsLi1JbmcuIChGSCkgUmFpbmVyIHZvbiBCb3JzdGVs LCBWb3JzaXR6ZW5kZXIgZGVzIEF1ZnNpY2h0c3JhdGVzOiBEci4gS2xhdXMgTWFpZXIKX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkRlciBJbmhhbHQgZGVyIHZvcnN0 ZWhlbmRlbiBFLU1haWwgaXN0IG5pY2h0IHJlY2h0bGljaCBiaW5kZW5kLiBEaWVzZSBFLU1haWwg ZW50aGFlbHQgdmVydHJhdWxpY2hlIHVuZC9vZGVyIHJlY2h0bGljaCBnZXNjaHVldHp0ZSBJbmZv cm1hdGlvbmVuLgpJbmZvcm1pZXJlbiBTaWUgdW5zIGJpdHRlLCB3ZW5uIFNpZSBkaWVzZSBFLU1h aWwgZmFlbHNjaGxpY2hlcndlaXNlIGVyaGFsdGVuIGhhYmVuLiBCaXR0ZSBsb2VzY2hlbiBTaWUg aW4gZGllc2VtIEZhbGwgZGllIE5hY2hyaWNodC4gSmVkZSB1bmVybGF1YnRlIEZvcm0gZGVyIFJl cHJvZHVrdGlvbiwgQmVrYW5udGdhYmUsIEFlbmRlcnVuZywgVmVydGVpbHVuZyB1bmQvb2RlciBQ dWJsaWthdGlvbiBkaWVzZXIgRS1NYWlsIGlzdCBzdHJlbmdzdGVucyB1bnRlcnNhZ3QuClRoZSBj b250ZW50cyBvZiB0aGUgYWJvdmUgbWVudGlvbmVkIGUtbWFpbCBpcyBub3QgbGVnYWxseSBiaW5k aW5nLiBUaGlzIGUtbWFpbCBjb250YWlucyBjb25maWRlbnRpYWwgYW5kL29yIGxlZ2FsbHkgcHJv dGVjdGVkIGluZm9ybWF0aW9uLiBQbGVhc2UgaW5mb3JtIHVzIGlmIHlvdSBoYXZlIHJlY2VpdmVk IHRoaXMgZS1tYWlsIGJ5IG1pc3Rha2UgYW5kIGRlbGV0ZSBpdCBpbiBzdWNoIGEgY2FzZS4gRWFj aCB1bmF1dGhvcml6ZWQgcmVwcm9kdWN0aW9uLCBkaXNjbG9zdXJlLCBhbHRlcmF0aW9uLCBkaXN0 cmlidXRpb24gYW5kL29yIHB1YmxpY2F0aW9uIG9mIHRoaXMgZS1tYWlsIGlzIHN0cmljdGx5IHBy b2hpYml0ZWQuCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f XwpwdHhkaXN0IG1haWxpbmcgbGlzdApwdHhkaXN0QHBlbmd1dHJvbml4LmRl