From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from enterprise02.smtp.diehl.com ([193.201.238.220]) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1fWKLc-0000cs-Dj for ptxdist@pengutronix.de; Fri, 22 Jun 2018 13:35:24 +0200 From: Denis OSTERLAND Date: Fri, 22 Jun 2018 11:35:22 +0000 Message-ID: <20180622113420.5149-1-Denis.Osterland@diehl.com> References: <20180621112156.18333-1-Denis.Osterland@diehl.com> In-Reply-To: <20180621112156.18333-1-Denis.Osterland@diehl.com> MIME-Version: 1.0 Content-Language: en-US Subject: [ptxdist] [PATCH v2] libxml2: apply fix for CVE-2017-8872 List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: "ptxdist@pengutronix.de" VGFrZW4gZnJvbSBkZWJpYW4gYnVzdGVyIGxpYnhtbDJfMi45LjcrZGZzZy0xLgoKU2lnbmVkLW9m Zi1ieTogRGVuaXMgT3N0ZXJsYW5kIDxEZW5pcy5Pc3RlcmxhbmRAZGllaGwuY29tPgotLS0KIC4u Li1ib3VuZHMtcmVhZC1pbi1odG1sUGFyc2VUcnlPckZpbmlzaC5wYXRjaCB8IDMxICsrKysrKysr KysrKysrKysrKysKIHBhdGNoZXMvbGlieG1sMi0yLjkuNy9zZXJpZXMgICAgICAgICAgICAgICAg ICB8ICA3ICsrKy0tCiAyIGZpbGVzIGNoYW5nZWQsIDM1IGluc2VydGlvbnMoKyksIDMgZGVsZXRp b25zKC0pCiBjcmVhdGUgbW9kZSAxMDA2NDQgcGF0Y2hlcy9saWJ4bWwyLTIuOS43LzAxMDAtT3V0 LW9mLWJvdW5kcy1yZWFkLWluLWh0bWxQYXJzZVRyeU9yRmluaXNoLnBhdGNoCgpkaWZmIC0tZ2l0 IGEvcGF0Y2hlcy9saWJ4bWwyLTIuOS43LzAxMDAtT3V0LW9mLWJvdW5kcy1yZWFkLWluLWh0bWxQ YXJzZVRyeU9yRmluaXNoLnBhdGNoIGIvcGF0Y2hlcy9saWJ4bWwyLTIuOS43LzAxMDAtT3V0LW9m LWJvdW5kcy1yZWFkLWluLWh0bWxQYXJzZVRyeU9yRmluaXNoLnBhdGNoCm5ldyBmaWxlIG1vZGUg MTAwNjQ0CmluZGV4IDAwMDAwMDAwMC4uYzIzY2I0N2U1Ci0tLSAvZGV2L251bGwKKysrIGIvcGF0 Y2hlcy9saWJ4bWwyLTIuOS43LzAxMDAtT3V0LW9mLWJvdW5kcy1yZWFkLWluLWh0bWxQYXJzZVRy eU9yRmluaXNoLnBhdGNoCkBAIC0wLDAgKzEsMzEgQEAKK0Zyb206IE1hcmN1cyBNZWlzc25lciA8 bWVpc3NuZXJAc3VzZS5kZT4KK0RhdGU6IFdlZCwgMyBKYW4gMjAxOCAxNDo0Mzo0MSArMDEwMAor U3ViamVjdDogW1BBVENIXSBPdXQtb2YtYm91bmRzIHJlYWQgaW4gaHRtbFBhcnNlVHJ5T3JGaW5p c2gKKworT3JpZ2luOiB2ZW5kb3IsIGh0dHBzOi8vYnVnemlsbGEubm92ZWxsLmNvbS9hdHRhY2ht ZW50LmNnaT9pZD03MzIzMDkKK0J1ZzogaHR0cHM6Ly9idWd6aWxsYS5nbm9tZS5vcmcvc2hvd19i dWcuY2dpP2lkPTc3NTIwMAorQnVnLURlYmlhbjogaHR0cHM6Ly9idWdzLmRlYmlhbi5vcmcvODYy NDUwCitCdWctRGViaWFuLVNlY3VyaXR5OiBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFu Lm9yZy90cmFja2VyL0NWRS0yMDE3LTg4NzIKK0J1Zy1TVVNFOiBodHRwczovL2J1Z3ppbGxhLm5v dmVsbC5jb20vc2hvd19idWcuY2dpP2lkPTEwMzg0NDQKK0ZvcndhcmRlZDogeWVzLCBodHRwczov L2J1Z3ppbGxhLmdub21lLm9yZy9hdHRhY2htZW50LmNnaT9pZD0zNjYxOTMKK1Jldmlld2VkLWJ5 OiBTYWx2YXRvcmUgQm9uYWNjb3JzbyA8Y2FybmlsQGRlYmlhbi5vcmc+CitMYXN0LVVwZGF0ZTog MjAxOC0wMS0wMworLS0tCisgcGFyc2VyLmMgfCA0ICsrKysKKyAxIGZpbGUgY2hhbmdlZCwgNCBp bnNlcnRpb25zKCspCisKK2RpZmYgLS1naXQgYS9wYXJzZXIuYyBiL3BhcnNlci5jCitpbmRleCAx YzVlMDM2ZWEyNjUuLjAyNTExMTA2N2FlOCAxMDA2NDQKKy0tLSBhL3BhcnNlci5jCisrKysgYi9w YXJzZXIuYworQEAgLTEyNDY3LDYgKzEyNDY3LDEwIEBAIHhtbEhhbHRQYXJzZXIoeG1sUGFyc2Vy Q3R4dFB0ciBjdHh0KSB7CisgCWN0eHQtPmlucHV0LT5jdXIgPSBCQURfQ0FTVCIiOworIAljdHh0 LT5pbnB1dC0+YmFzZSA9IGN0eHQtPmlucHV0LT5jdXI7CisgICAgICAgICBjdHh0LT5pbnB1dC0+ ZW5kID0gY3R4dC0+aW5wdXQtPmN1cjsKKysgICAgaWYgKGN0eHQtPmlucHV0LT5idWYpCisrICAg ICAgICB4bWxCdWZFbXB0eSAoY3R4dC0+aW5wdXQtPmJ1Zi0+YnVmZmVyKTsKKysgICAgZWxzZQor KyAgICAgICAgY3R4dC0+aW5wdXQtPmxlbmd0aCA9IDA7CisgICAgIH0KKyB9CisgCmRpZmYgLS1n aXQgYS9wYXRjaGVzL2xpYnhtbDItMi45Ljcvc2VyaWVzIGIvcGF0Y2hlcy9saWJ4bWwyLTIuOS43 L3NlcmllcwppbmRleCAwNWJhNWRkZWEuLjc2YTdmN2MyNSAxMDA2NDQKLS0tIGEvcGF0Y2hlcy9s aWJ4bWwyLTIuOS43L3NlcmllcworKysgYi9wYXRjaGVzL2xpYnhtbDItMi45Ljcvc2VyaWVzCkBA IC0xLDYgKzEsNyBAQAogIyBnZW5lcmF0ZWQgYnkgZ2l0LXB0eC1wYXRjaGVzCi0jdGFnOmJhc2Ug LS1zdGFydC1udW1iZXIgMQotI3RhZzp1cHN0cmVhbSAtLXN0YXJ0LW51bWJlciAxCisjdGFnOnVw c3RyZWFtIC0tc3RhcnQtbnVtYmVyIDEwMAorMDEwMC1PdXQtb2YtYm91bmRzLXJlYWQtaW4taHRt bFBhcnNlVHJ5T3JGaW5pc2gucGF0Y2gKICN0YWc6cHR4IC0tc3RhcnQtbnVtYmVyIDIwMAogMDIw MC14bWwyLWNvbmZpZy1pcy1ub3QtU1lTUk9PVC1hd2FyZS5wYXRjaAotIyBiNjcyMGJlOTU2ZDFi NDYxOWJjMWMzNDdhMGNlYjFkZCAgLSBnaXQtcHR4LXBhdGNoZXMgbWFnaWMKKyN0YWc6YmFzZSAt LXN0YXJ0LW51bWJlciAxCisjIDczYjUxZGJiNTc5ZDE1NTVhOWM0Yzc2Y2M4YjI5NDdhICAtIGdp dC1wdHgtcGF0Y2hlcyBtYWdpYwotLSAKMi4xOC4wCgoKRGllaGwgQUtPIFN0aWZ0dW5nICYgQ28u IEtHLCBQZmFubmVyc3RyYcOfZSA3NS04MywgODgyMzkgV2FuZ2VuIGltIEFsbGfDpHUKQmVyZWlj aHN2b3JzdGFuZDogRGlwbC4tSW5nLiBNaWNoYWVsIFNpZWRlbnRvcCAoU3ByZWNoZXIpLCBKb3Nl ZiBGZWxsbmVyIChNaXRnbGllZCkKU2l0eiBkZXIgR2VzZWxsc2NoYWZ0OiBXYW5nZW4gaS5BLiDi gJMgUmVnaXN0ZXJnZXJpY2h0OiBBbXRzZ2VyaWNodCBVbG0gSFJBIDYyMDYwOSDigJMgUGVyc8O2 bmxpY2ggaGFmdGVuZGUgR2VzZWxsc2NoYWZ0ZXJpbjogRGllaGwgVmVyd2FsdHVuZ3MtU3RpZnR1 bmcg4oCTIFNpdHo6IE7DvHJuYmVyZyDigJMgUmVnaXN0ZXJnZXJpY2h0OiBBbXRzZ2VyaWNodCBO w7xybmJlcmcgSFJBIDExNzU2IOKAkwpWb3JzdGFuZDogRHIuLUluZy4gS2FybCBUcmFnbCAoVm9y c2l0emVuZGVyKSwgSGVyciBEaXBsLi1XaXJ0c2NoLi1JbmcuIFdvbGZnYW5nIFdlZ2dlbiAoc3Rl bGx2ZXJ0cmV0ZW5kZXIgVm9yc2l0emVuZGVyKSwgRGlwbC4tS2ZtLiBDbGF1cyBHw7xudGhlciwg RGlwbC4tS2ZtLiBGcmFuayBHdXR6ZWl0LCBEci4tSW5nLiBIZWlucmljaCBTY2h1bmssIERyLi1J bmcuIE1pY2hhZWwgU2llZGVudG9wICwgRGlwbC4tS2ZtLiBEci4tSW5nLiBNYXJ0aW4gU29tbWVy LCBEaXBsLi1JbmcuIChGSCkgUmFpbmVyIHZvbiBCb3JzdGVsLCBWb3JzaXR6ZW5kZXIgZGVzIEF1 ZnNpY2h0c3JhdGVzOiBEci4gS2xhdXMgTWFpZXIKX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCkRlciBJbmhhbHQgZGVyIHZvcnN0ZWhlbmRlbiBFLU1haWwgaXN0IG5p Y2h0IHJlY2h0bGljaCBiaW5kZW5kLiBEaWVzZSBFLU1haWwgZW50aGFlbHQgdmVydHJhdWxpY2hl IHVuZC9vZGVyIHJlY2h0bGljaCBnZXNjaHVldHp0ZSBJbmZvcm1hdGlvbmVuLgpJbmZvcm1pZXJl biBTaWUgdW5zIGJpdHRlLCB3ZW5uIFNpZSBkaWVzZSBFLU1haWwgZmFlbHNjaGxpY2hlcndlaXNl IGVyaGFsdGVuIGhhYmVuLiBCaXR0ZSBsb2VzY2hlbiBTaWUgaW4gZGllc2VtIEZhbGwgZGllIE5h Y2hyaWNodC4gSmVkZSB1bmVybGF1YnRlIEZvcm0gZGVyIFJlcHJvZHVrdGlvbiwgQmVrYW5udGdh YmUsIEFlbmRlcnVuZywgVmVydGVpbHVuZyB1bmQvb2RlciBQdWJsaWthdGlvbiBkaWVzZXIgRS1N YWlsIGlzdCBzdHJlbmdzdGVucyB1bnRlcnNhZ3QuClRoZSBjb250ZW50cyBvZiB0aGUgYWJvdmUg bWVudGlvbmVkIGUtbWFpbCBpcyBub3QgbGVnYWxseSBiaW5kaW5nLiBUaGlzIGUtbWFpbCBjb250 YWlucyBjb25maWRlbnRpYWwgYW5kL29yIGxlZ2FsbHkgcHJvdGVjdGVkIGluZm9ybWF0aW9uLiBQ bGVhc2UgaW5mb3JtIHVzIGlmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZS1tYWlsIGJ5IG1pc3Rh a2UgYW5kIGRlbGV0ZSBpdCBpbiBzdWNoIGEgY2FzZS4gRWFjaCB1bmF1dGhvcml6ZWQgcmVwcm9k dWN0aW9uLCBkaXNjbG9zdXJlLCBhbHRlcmF0aW9uLCBkaXN0cmlidXRpb24gYW5kL29yIHB1Ymxp Y2F0aW9uIG9mIHRoaXMgZS1tYWlsIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuCgpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpwdHhkaXN0IG1haWxpbmcgbGlz dApwdHhkaXN0QHBlbmd1dHJvbml4LmRl