From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 17 Nov 2023 15:51:26 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1r40Bp-00F7pS-1Y for lore@lore.pengutronix.de; Fri, 17 Nov 2023 15:51:26 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1r40Bp-0002Xd-Sd; Fri, 17 Nov 2023 15:51:25 +0100 Received: from mail-he1eur04on2089.outbound.protection.outlook.com ([40.107.7.89] helo=EUR04-HE1-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1r40BO-0002Ll-6W for ptxdist@pengutronix.de; Fri, 17 Nov 2023 15:50:58 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lr1Ob6CbY8REfRvfWJar1qioFg+QIWgezPwZIc2PACvQxzBKcoaPEMb0dgnDL47G9IQsJsBirzj0PKG9FRxGxHR0OHggy0NAj0gLDnQidji263vSbdu6aR7p4aqgOYFow0yahjB9xi9WDdK002RRlXWKUL4EDqog48cm1GBHkkyVymM/qxGraSSV8vXSDYti6mzZXHt5DoWlkyfNnTIWKTidc9tSy9Z3DUpUOQDi94gUcsvNV5AZ726gcO5lSK7obcdoJDwY7IoXSZUHAMWRAk3nWb1XIJ8idAOKSfLvv+WtYCy50MU7lIkysZ8QksOKDjPXQnASODW8hTKJyizNtQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iP9axrvX0BH1gmzCT95o9xQ4O3I7YQWp9hb1UWjLhSU=; b=b+GYSiQuSqk3G0gupLsNETOkIKF16H/M+bG8bwIWHYOCuRqsKB9BVocXff4fKpXO9q7qdoEp2F8vzeC3qVajMuHbEjXMXlstW4RE1HaeBs4uCPJiyLl3kA1xATQANN84rZjGvzf7Vr+GZHtSDSaKz1moG1UVbiwJoi2gIidoRpecMFKKYo7/QVnqFsQQPyyGBeb7kKaKFWpisDSIis4PxbRIoavpmdtgVvjxvWUmURTRSpqJPzeYxLh8wZGtuDQQEcqQ7E+VmOWu6CKrDxBfM9VUrEK9iSBJw6/Ns1pAXL9XPlA2b1t5W1i/wXaJxUGm2xic6ZOaMlO7OmzqWHWOkg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iP9axrvX0BH1gmzCT95o9xQ4O3I7YQWp9hb1UWjLhSU=; b=OKl0qXkCG680Os6iRmuorDcNu2s2mgiuOEUdnyY3YgevgvfH6u4WWtufbg1cTFGE68bq+WU55lhot2suAZ8TLdoO42M5e96CKR88Tn9RR2tDh8ruIWlfRupaok7vFFrMiabQmksPkxc5tIVngtMFsHE6j4B45ANWtDIrxtXP+4M= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PAXP251MB0542.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:287::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7002.21; Fri, 17 Nov 2023 14:50:55 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::534e:22ca:cd9a:a66e]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::534e:22ca:cd9a:a66e%5]) with mapi id 15.20.7002.022; Fri, 17 Nov 2023 14:50:55 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 17 Nov 2023 15:50:38 +0100 Message-Id: <20231117145038.1583235-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVX0EPF0000ED8E.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:3:0:6) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PAXP251MB0542:EE_ X-MS-Office365-Filtering-Correlation-Id: d537da3e-aa1a-4589-d455-08dbe77c9a27 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(366004)(39830400003)(396003)(346002)(376002)(136003)(230922051799003)(64100799003)(1800799009)(186009)(451199024)(6506007)(36756003)(26005)(6666004)(52116002)(6512007)(2616005)(83380400001)(5660300002)(44832011)(8676002)(478600001)(8936002)(41300700001)(966005)(2906002)(6486002)(316002)(1076003)(6916009)(66556008)(66476007)(66946007)(86362001)(38100700002)(38350700005); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?jJsqWBl2nOqesvzoCualVcR1qoKS8POBEzqfUZp5rD7YUKRu40LYFltNhFjS?= =?us-ascii?Q?qWnV9oZguB++z0bDybu0BgZJuJ2pc9fy5q/Le+ixft8x+C2bzjjK8g4Fak1h?= =?us-ascii?Q?OrX3+euzAadXyRqk6XrgmcgMP69k1tp8ySmwAbvDKEu4SK8SFNHRBU4UUILo?= =?us-ascii?Q?v/WrZ2oWJSQ5psyj0mPKcOWScejJvlYlD7mRKNHjQssgfFAmrInYwju84tnL?= =?us-ascii?Q?b0cKXDBM62olWFXSU4IgsQ4eTwkbc90EdOWzzPGw3VGwR0TbWXAXGL9NK7Gn?= =?us-ascii?Q?cXqmIx9OK4Gq6xiYS0kkOgRdt4ZUURK9hiqPfBI9KsI8tdWgP12V7+45a4Qs?= =?us-ascii?Q?xZHkjYBY8VHeaO9K+/ozt+xeiGQFebbI38TKp75umJZ/X6OPtmVYzcme/Nlr?= =?us-ascii?Q?jmkqfsHYHSdG3KsFp7a21t8w+7jyNzxowBqlfxXkQpJtC6jGWKlO2gOL5P4j?= =?us-ascii?Q?SwsxV/JhU8bB2SaaExk7u7hbQR1idT409Pex7oMMQt5CQddzXef69vgJLYu8?= =?us-ascii?Q?ubudLrQjS+BlYulbKT89oO5n8nLSvHAwbVpMapjtHIzvdeNXDgqVXIAEI2PT?= =?us-ascii?Q?9zQidmesgVcjtnv9PYxpdlOdD9zOd5AI4MvGwH/wAQihzYPw4+GnjpdZqj6Q?= =?us-ascii?Q?2YTEHMMQzO+XZv20Tp7vU1wUUL7GsKL4rVeEJT2Y6jG9FJta4U2qPcfoV7jN?= =?us-ascii?Q?rBOkcIsgs9OaPj/SItpjy2FEjFB8sy7yciSEH7bkRX9fpsy86dQpdoBMm29O?= =?us-ascii?Q?8sKBnGoVixtXDwJfhGqNqCTIrkYVKFRjTIEpG2/2kl1W6w42fTic2YO/UYDl?= =?us-ascii?Q?7S4Od3EB+dopa1lqYn8BcLZ9qZ6O/Lw9s93AFcC3PtqownbMT8HBO9uJai9H?= =?us-ascii?Q?2iXAQE4HrW7hS5T3+twXJvHyJB70ld1d15YQ484EyXS9984tthTDO8d2RTOh?= =?us-ascii?Q?2XftlXWq25YU0RQwrlXe+KAt/KZ+z1agM7jjVWbtwVHHTqkCgbXTs1ulTthV?= =?us-ascii?Q?+KJ740iZGaiVF4lhp/0kSUy6VK9bnnwofY2BDERVs6slqJBBEcxMlb7eI8wt?= =?us-ascii?Q?R8lzBb3ZWWZfB3l5CKKSVwCdkZiastaRPgy3y2aQjZwPxO7lisl8fzY2Cumz?= =?us-ascii?Q?Z6QK18P20YbnjwA7SWxm9K7uLgRfLH7t5Y3GthAhTBPCYkqJ6+bCY12vLdL/?= =?us-ascii?Q?RMNw2HkAS/y+ULMmMumi/Wynaah7hYdXet67x3jeP2z/fc7LGuoENe4E7m9I?= =?us-ascii?Q?MWPLWxltZF6MtWzA8ndIGJDx02U04IgO4adhGignkRl2wg/Nb8GX7TiCrF3C?= =?us-ascii?Q?UZCw4ExE6VIJCXGC5678TCwHOsiVXooTfOnIkQNJVQCqZhl8pYeIMPO+yzOT?= =?us-ascii?Q?Xn2uPWi824W7mwBW01AadV3OnxivQbZR3ImurPBggDFAZfeil266Le8N9CG4?= =?us-ascii?Q?uLhm8L54/QrZp5Z8jFDV37HSRozTxj1/eRi1dHCVbaNfoyl9DHP9PFjPmhaR?= =?us-ascii?Q?ilx2L0msGlN3IUFgE/S6cDwJGQBrqcsgq6wtUiWfPm9xAfWkdc1FXtv0gr2a?= =?us-ascii?Q?ZErv8bW55wkhP6KqEMch4HatYVlxRO+pA+7o9UF6nhAXOA8YyYzX7G73mDrD?= =?us-ascii?Q?jA=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: d537da3e-aa1a-4589-d455-08dbe77c9a27 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Nov 2023 14:50:55.3403 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 9m/lIOGVEwNYw2yj224rg+Cgz+3sXdV9JuUfkKe1vFXuziWPJrenlGkWALIlqJGsX3WQix+K6Wm7zzaEKLnt6COrwl4zwqNyfM8XSENPRpg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXP251MB0542 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libxml2: Version bump. 2.11.5 -> 2.11.6 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Just a minor bump. https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.6 Plugs CVE: CVE-2023-45322: use-after-free in xmlParseCharDataInternal * Forward patchset, applies cleanly. Signed-off-by: Christian Melki --- .../0200-xml2-config-is-not-SYSROOT-aware.patch | 0 patches/{libxml2-2.11.5 => libxml2-2.11.6}/series | 0 rules/libxml2.make | 4 ++-- 3 files changed, 2 insertions(+), 2 deletions(-) rename patches/{libxml2-2.11.5 => libxml2-2.11.6}/0200-xml2-config-is-not-SYSROOT-aware.patch (100%) rename patches/{libxml2-2.11.5 => libxml2-2.11.6}/series (100%) diff --git a/patches/libxml2-2.11.5/0200-xml2-config-is-not-SYSROOT-aware.patch b/patches/libxml2-2.11.6/0200-xml2-config-is-not-SYSROOT-aware.patch similarity index 100% rename from patches/libxml2-2.11.5/0200-xml2-config-is-not-SYSROOT-aware.patch rename to patches/libxml2-2.11.6/0200-xml2-config-is-not-SYSROOT-aware.patch diff --git a/patches/libxml2-2.11.5/series b/patches/libxml2-2.11.6/series similarity index 100% rename from patches/libxml2-2.11.5/series rename to patches/libxml2-2.11.6/series diff --git a/rules/libxml2.make b/rules/libxml2.make index 865031013..080b89aa2 100644 --- a/rules/libxml2.make +++ b/rules/libxml2.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBXML2) += libxml2 # # Paths and names # -LIBXML2_VERSION := 2.11.5 -LIBXML2_MD5 := b2e7332289f5784087448a0717f45ac3 +LIBXML2_VERSION := 2.11.6 +LIBXML2_MD5 := 948141d54edae15daaee80ea216645eb LIBXML2 := libxml2-$(LIBXML2_VERSION) LIBXML2_SUFFIX := tar.xz LIBXML2_SOURCE := $(SRCDIR)/$(LIBXML2).$(LIBXML2_SUFFIX) -- 2.34.1