From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 25 Jul 2024 16:26:29 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1sWzQL-002pMj-1G for lore@lore.pengutronix.de; Thu, 25 Jul 2024 16:26:29 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1sWzQK-0002SN-62; Thu, 25 Jul 2024 16:26:28 +0200 Received: from mail-dbaeur03on2121.outbound.protection.outlook.com ([40.107.104.121] helo=EUR03-DBA-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1sWzQ7-0002Rv-OM for ptxdist@pengutronix.de; Thu, 25 Jul 2024 16:26:16 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bnt2nvXAGb0i4waAzLAef0GNcauSmixOfB0BqpfzIXgt1FKkQeU/qZE7n+0Aw/x70eP+GJdGXgBf9R8xMOdxXs4AmDQ0pSy4oy2s3COxVKJnv5QpvxRqPT0oq3SXNvsn8ymXs2GeYJl/dVo+uXN+v0Kr5GjJ6l9JTZMw3h0j5yUVLyy6e9o1sN2YGJkCFRiXdC28+BfyQmFf4Y6X0rvgwFbe1oVLJa7xmRWwfaZRfc0iwEVyVaJ5PP7ajh/wHwORFPpyGq+n+Zf4bVAbJ0wmpb9d7gwfKrdsyxCVK1zcLnKbGQ/v/qJm/1dNGa2ef2OVm/but6MY+laFfZmACW5bDg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uDZoC3gzC6dxOxgcwKc7yI1P6tOOdicxI4wMGJpJdm4=; b=F/uVSADPPI/DreAmPEOALRbjMI+OZdsdgFgiqL+xDLpSC7Ct/6j+Q01Jh7yvCHaLhEi7btUreVBz2N2y2x47nx5rL4kAK091cg5F8WOm3AvG6qvUXlF/VOFVe519Kt+BSKj32g55E6PS4Zsi7mc1Y+oFCHWDAWKl/5D7jC8Nki70i3udN3p4DhALvVBvCe8yOLFre6jaczIcmchyu1vnjca/gFA9OcqaCu+JTiYaFxnO8JcTjhE09DJoGtCA3RD0Yn0gnPfRNjlO1lG9cwyox2nbxA/Zbwwcidxu6jhNmkpsCfaVhH0oUlKRz3blRb4t9oCnNzIOUu2RugMV8IHgpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uDZoC3gzC6dxOxgcwKc7yI1P6tOOdicxI4wMGJpJdm4=; b=ISOwZ4Y5Hm2CSF4EJVpSCbI/vNfSyihLy3aPr9mNVpa/BQ/WggakLprs7fkUJH95kRR16JbTxzUw+ZGncoZnXzaF2anQv7jWCmOWk5o1hfHEln6BpFrL6iuKHSGApEpO+yYZNKMoIbDFn8LBPIfpbZHY42upVEeJ1QUS2Eg4XME= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by DB9P251MB0715.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:333::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.28; Thu, 25 Jul 2024 14:26:11 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903%6]) with mapi id 15.20.7762.030; Thu, 25 Jul 2024 14:26:11 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 25 Jul 2024 16:26:04 +0200 Message-Id: <20240725142604.3741628-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3PEPF00002BBB.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:6:0:15) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|DB9P251MB0715:EE_ X-MS-Office365-Filtering-Correlation-Id: 43e10291-4366-4f98-1d0f-08dcacb5bb32 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|52116014|376014|366016|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?FzLAOIcssWODZRwwFn+2n7a9Pd6hhXCt60chObdyTVzDTvlx/eApYMdA1+Sa?= =?us-ascii?Q?XyLcmhyt2IDC1GkTiCM2FboZvyGwlMBgamcZZ6Dqkozti74Iu0v1JCupful8?= =?us-ascii?Q?/WHVw+xnEJKL2TykGkYIRBmkInDdF0tVllyyproxU0jsvw0DnMLAMw582q/x?= =?us-ascii?Q?yO8M2jFcDsrGwqUr0zkaP60EbEYCyO41MYuawN0D1Jh60cZs6ytM8GqWFlR0?= =?us-ascii?Q?+KXMdR3SkZH5bnyQOr85Ox/gmZvDapj4aqKnvRtrsHsX7PM9K8aVo6u7Lc1o?= =?us-ascii?Q?JTz0VWD4Uw5tAMDfFE0MIca33yKMt4vUdJDdK+7LNRExAB3umcix9WZmKU02?= =?us-ascii?Q?U0kceGKq+uSAlqQ7X1eNkgkzP8p8nCDGQ+AFyg1N7rZaGYLMEhXbp+FXQ82X?= =?us-ascii?Q?aAMZhm5P+6B5gD6MzUgjDwkhbZLTHqS+1zFoYixzxlzfmQdd/ftxLOm4UGmg?= =?us-ascii?Q?q8aJQB7r1R9bN1k1MFZSRslIOsIWka1Dki7qsVoJG7T5fWyK3aGpyUyI/tSo?= =?us-ascii?Q?YA6UyNAyktlGTvOHcGa5UAtcDYya6MVXabXF3psvwh1cGBSlcktOx+2N4e0B?= =?us-ascii?Q?+wzh9ZRxAcuq5GkHQDXeBi9NmCWNDsUTySetsi+w6ckCJJ9pO0pKFXa0/UPP?= =?us-ascii?Q?rmA8VjvxDTvjV+PQyLRQocgTzRNi/2dKRGrYaT1DHZtIQQv6lGv4C9UMJxq0?= =?us-ascii?Q?MrEGuLrorQkuvOaXUtnGfe2PoZZItOdgkxfw24qCOxM7t9tE7sdsQWFy62FJ?= =?us-ascii?Q?FQEdCQMwK+fY55DyjJWjSa8ZhARogRnFkxXFy+vvbjUm5x34jjiHKSGHTZPa?= =?us-ascii?Q?lLLg2h/2uQaBYD0NrNtUedSFSHDji2GtEpneCs8kMD+guNSn5Alj/TO7VIV9?= =?us-ascii?Q?ctvVf8mEL2H+cavm3R+WU9cUSlL1mbI3Q4YvtMOSGG7D+cNm5Xxs09F3od3i?= =?us-ascii?Q?H6VEicIxK45szUKrVf6j+dFLAvJUpyX+tRBgJqX7sQdvwtNcPI6cB7IuLEZE?= =?us-ascii?Q?u7rPRx5bN8Rm4VVVSXUrHvKSYr7wc9B6thT3kK54NHm2aSbtGMdfdhk9PomD?= =?us-ascii?Q?lET7LyYz4d2nHB2r3Xc1FI+32KxtW6UQEO3DMSZotj1LfJHLg1sf8seQuT5d?= =?us-ascii?Q?v1G+GmXXrlxPX1PHvt5efjDv8jNPc8el8PjsFgF6UmzuHYYgRePkIEMkZZE6?= =?us-ascii?Q?4vWqjieXmhxxfAHtudGAYqYT5893fgAFo+grSyz/ASzlbPB1sDeKehPaaFDZ?= =?us-ascii?Q?Xmg1VJmtOW8vrD++UnbBaeFWyessNAet0lD8DuJ04F+ynYoiDLrErxI5DPGM?= =?us-ascii?Q?I1MYjaqErNxPcKxFp2djjxegLq/L8DSAeF++xqS3T7A1SwrBzP4GIYYn6AfE?= =?us-ascii?Q?DO3z7OU=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(52116014)(376014)(366016)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?mQmx8gWTLjhBwesfdh3wHBm1QEEPTAVrWyuwqVsV8p2Q76guUEgwalzJrxya?= =?us-ascii?Q?WEh48GQedgNN1xAkf2pWziFMHO7WOxFi0LAfjiJUkQG9l/LQzK5VmnW28rTV?= =?us-ascii?Q?8S8FqREhv+54uar85sVKAUkC9Pui6uJPamBpVrZYDmpR6gRpX8PxNeQfEwbD?= =?us-ascii?Q?9omZcPObugm2P71dn7qPKfYEZIYkRoJqb23lMrgbEvz01SLreeN04bZfpRi8?= =?us-ascii?Q?HfiZ23sTDAsW8qSruRdI9k1TEkbcNANHYFVxDJyF2/rtW6Nkh6W4d97hMscU?= =?us-ascii?Q?qrAc5RCsl0dtZJ6rHJrmJYulEeAYmYcHTNL9gFuw5G8zbVBuhZJwj8ID+UmR?= =?us-ascii?Q?HiUie3je9nGbqIsxyje1szd1BPWcD6zPk2eNzozAKw4A8+bshltNX2uBL7iI?= =?us-ascii?Q?NC/CoHMpxijKipDqRBKEgs9mQtqF80uILrug8s1tzZq6AeW85jvW6Mftn4ue?= =?us-ascii?Q?mScfJ6X3MiQ1eyenPuLiTgD7/t+zmUstpEcjQTiWmEqhhV70aXcl0W9biaTD?= =?us-ascii?Q?qko29RTpb0k13wIrMABjztBkBIv7QOukqtp1OLvgeDcxcS9qS2KkYoRBKky5?= =?us-ascii?Q?w7LS1UjoEuDRkJXvB5eLfl//n4iwHNpKdFHucZkkVKz2kmBdy/uGRGC7AKCi?= =?us-ascii?Q?ny08NnJM574YOQkYPQwdp6nnEcEdSIjsBAM2vUcNMWwedPo7kBwhyXsxgzgi?= =?us-ascii?Q?SVIPCRAdS7GFvc1dKqsKLg2LA2x2l/5jq49IZhC/57lMrJTKs4M7E2OJdVa2?= =?us-ascii?Q?9nyAndf0Q/OEtNySS8CQboFQAnE3BpgsvArij0Hlbdkag+ELUxHORh43aq8q?= =?us-ascii?Q?fkbHdqOr6fASG63aM07ZgRSQEiUKtxDO7S+ePQnsAf7sfEUrLyn5OvTjbv4X?= =?us-ascii?Q?xtuxjSIuwXoMA/YNdFwBnI8k4VceRzTT1NwfZT3wb6oXBHRIUCj89eY0vQHD?= =?us-ascii?Q?CLLyEyY8nXrNZ+HKsMs0sn4BOgrMLPrID5UaLqD5ExGiMUbux+jBCpWoW8vW?= =?us-ascii?Q?tB2ytZkRkf9FKlOD6X+gHcOu76CMtF9go49f2nYL998pALAAc62QOgJGITUx?= =?us-ascii?Q?/1m/ZWfk2NbKaQT7zclY7QNnXvEwU/I+fpawzWEkYSlrkLbxv6LfrGXJXPXy?= =?us-ascii?Q?wWyOLzTmbUxEYkoxM3wvbnGQJN/hDSbvXnlwjqkp7rXDLDs4yLvqZpTzHU++?= =?us-ascii?Q?Kx+od46r3OwmRlg+pQUZX4dcKKZrTZg3/zUmW7nmZTjLvN/SLQSb3B8ySYtM?= =?us-ascii?Q?RKh34/2o3fFITFMyz8IHotk+9gguCS2o0ji6TUCuHYGBZRXc7RWsWRZdxbVX?= =?us-ascii?Q?Tl/LBQe9Crwwd18pRU/62atjQPQxzJKkZW4Auq3UYJlT8sOjpLiO9P5KkF9L?= =?us-ascii?Q?vLMU583+koNw1QK227XlVhak0I8CLgiOaxDaG8l8K4bGSz/X8wPCBMZjql10?= =?us-ascii?Q?+u7EHydW11S//sU9ALntfmvs3LEt+eZUlfCYes9KYUw2JK9D8fEL78NJsJ7X?= =?us-ascii?Q?g+N04bcu842wRkuBq6tkq9RcCZgLjoyNBH7Fd2phg2o+UYT/UapPSvCWbS5B?= =?us-ascii?Q?uL5B7Qn97+Lu7L2bbkE+GWPWdZVaFylpPPXJSlR+8GQezwTfSQY+2syAxyUQ?= =?us-ascii?Q?6Q=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 43e10291-4366-4f98-1d0f-08dcacb5bb32 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jul 2024 14:26:11.0572 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: mcM05AfCmRA1mgk3ivEiFfpPlnGcq9OyBDslHxtIMgzRbanBjCPyMOzI/pTPrJXdYP/Sls9XlSno4vIx5l3KKOQbHnPkMrCMcskL60ke27k= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0715 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libxml2: Version bump. 2.13.2 -> 2.13.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Minor changes. https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.3 Plugs CVE: CVE-2024-40896 - Fix XXE protection in downstream code * Forward patchset. Applies cleanly. Signed-off-by: Christian Melki --- .../0200-xml2-config-is-not-SYSROOT-aware.patch | 0 patches/{libxml2-2.13.2 => libxml2-2.13.3}/series | 0 rules/libxml2.make | 4 ++-- 3 files changed, 2 insertions(+), 2 deletions(-) rename patches/{libxml2-2.13.2 => libxml2-2.13.3}/0200-xml2-config-is-not-SYSROOT-aware.patch (100%) rename patches/{libxml2-2.13.2 => libxml2-2.13.3}/series (100%) diff --git a/patches/libxml2-2.13.2/0200-xml2-config-is-not-SYSROOT-aware.patch b/patches/libxml2-2.13.3/0200-xml2-config-is-not-SYSROOT-aware.patch similarity index 100% rename from patches/libxml2-2.13.2/0200-xml2-config-is-not-SYSROOT-aware.patch rename to patches/libxml2-2.13.3/0200-xml2-config-is-not-SYSROOT-aware.patch diff --git a/patches/libxml2-2.13.2/series b/patches/libxml2-2.13.3/series similarity index 100% rename from patches/libxml2-2.13.2/series rename to patches/libxml2-2.13.3/series diff --git a/rules/libxml2.make b/rules/libxml2.make index 52e741703..c47d56216 100644 --- a/rules/libxml2.make +++ b/rules/libxml2.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBXML2) += libxml2 # # Paths and names # -LIBXML2_VERSION := 2.13.2 -LIBXML2_MD5 := b678709cd8f6bed9980007b8228804a3 +LIBXML2_VERSION := 2.13.3 +LIBXML2_MD5 := aeb92dc58cea91c95a10751327193a11 LIBXML2 := libxml2-$(LIBXML2_VERSION) LIBXML2_SUFFIX := tar.xz LIBXML2_SOURCE := $(SRCDIR)/$(LIBXML2).$(LIBXML2_SUFFIX) -- 2.34.1