From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: bug#30414: Libreoffice CVE-2018-6871 [remote read of any local files] Date: Sun, 11 Feb 2018 15:08:59 +0000 Message-ID: <1518361739.176445.1267005016.063B804B@webmail.messagingengine.com> References: <20180210185246.GA18573@jasmine.lan> <20180210214952.GA19621@jasmine.lan> <1518359342.2320488.1266983880.27284CC4@webmail.messagingengine.com> <20180211144214.GA21042@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="_----------=_15183617391764452" Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55394) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ektGY-000476-Qp for bug-guix@gnu.org; Sun, 11 Feb 2018 10:10:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ektGV-0005Tx-6Y for bug-guix@gnu.org; Sun, 11 Feb 2018 10:10:06 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:58783) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ektGU-0005Td-W3 for bug-guix@gnu.org; Sun, 11 Feb 2018 10:10:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ektGU-0001ET-9b for bug-guix@gnu.org; Sun, 11 Feb 2018 10:10:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20180211144214.GA21042@jasmine.lan> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Leo Famulari Cc: 30414@debbugs.gnu.org This is a multi-part message in MIME format. --_----------=_15183617391764452 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" Leo Famulari writes: >> From a28e82e1e3d480d5edf374cea062536d4c8d6d82 Mon Sep 17 00:00:00 2001 >> From: Marius Bakke >> Date: Sun, 11 Feb 2018 11:46:27 +0100 >> Subject: [PATCH] gnu: libreoffice: Update to 5.4.5.1 [CVE-2018-6871]. >> >> * gnu/packages/check.scm (cppunit-1.14): New public variable. >> * gnu/packages/libreoffice.scm (xmlsec-src-libreoffice): Remove variable. >> (libreoffice): Update to 5.4.5.1. >> [native-inputs]: Change CPPUNIT to CPPUNIT-1.14. >> [inputs]: Add GPGME and XMLSEC-NSS. Remove XMLSEC-SRC-LIBREOFFICE. Replace >> LIBJPEG with LIBJPEG-TURBO. >> [arguments]: Remove xmlsec code from PREPARE-SRC-PHASE. Make sure GPGME++ >> headers are found. Add workaround for . Add >> "--disable-pdfium" to #:configure-flags. >> * gnu/packages/xml.scm (xmlsec-nss): New public variable. > > The only change I suggest is to remove the obsolete comment at the > beginning of libreoffice's native-inputs about the xmlsec tarball. Good catch. It seems the autoconf and automake inputs are no longer required. But I unfortunately spoke too soon earlier, it failed very late in the build: [build CMP] filter/source/xsltdialog/xsltdlg ld: cannot find -lltdl collect2: error: ld returned 1 exit status make[1]: *** [/tmp/guix-build-libreoffice-5.4.5.1.drv-0/libreoffice-5.4.5.1/xmlsecurity/Library_xsec_xmlsec.mk:10: /tmp/guix-build-libreoffice-5.4.5.1.drv-0/libreoffice-5.4.5.1/instdir/program/libxsec_xmlsec.so] Error 1 make[1]: *** Waiting for unfinished jobs.... make: *** [Makefile:269: build] Error 2 phase `build' failed after 2114.1 seconds I've attached a revised patch that adds libltdl, and removes the automake inputs. However, I have to leave now, so could you please verify that it works and push? I can provide moral support on #guix if nothing else :-) TIA! --_----------=_15183617391764452 Content-Disposition: attachment; filename="0001-gnu-libreoffice-Update-to-5.4.5.1-CVE-2018-6871.patch" Content-Id: <1518361660.176368.a3bc0bca291ec4baa76fc576bfa72974cb5e4278.78916025@content.messagingengine.com> Content-Transfer-Encoding: base64 Content-Type: text/x-patch; name="0001-gnu-libreoffice-Update-to-5.4.5.1-CVE-2018-6871.patch" RnJvbSA3OGEyMTYwMjZjYzVkNGJlNGUxNjIzZmJlOGIzNjMyZjQ3Yjk5ZWY4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBNYXJpdXMgQmFra2Ug PG1iYWtrZUBmYXN0bWFpbC5jb20+CkRhdGU6IFN1biwgMTEgRmViIDIwMTgg MTE6NDY6MjcgKzAxMDAKU3ViamVjdDogW1BBVENIXSBnbnU6IGxpYnJlb2Zm aWNlOiBVcGRhdGUgdG8gNS40LjUuMSBbQ1ZFLTIwMTgtNjg3MV0uCgoqIGdu dS9wYWNrYWdlcy9jaGVjay5zY20gKGNwcHVuaXQtMS4xNCk6IE5ldyBwdWJs aWMgdmFyaWFibGUuCiogZ251L3BhY2thZ2VzL2xpYnJlb2ZmaWNlLnNjbSAo eG1sc2VjLXNyYy1saWJyZW9mZmljZSk6IFJlbW92ZSB2YXJpYWJsZS4KKGxp YnJlb2ZmaWNlKTogVXBkYXRlIHRvIDUuNC41LjEuCltuYXRpdmUtaW5wdXRz XTogQ2hhbmdlIENQUFVOSVQgdG8gQ1BQVU5JVC0xLjE0LiAgUmVtb3ZlIEFV VE9DT05GIGFuZCBBVVRPTUFLRS4KW2lucHV0c106IEFkZCBHUEdNRSwgWE1M U0VDLU5TUyBhbmQgTElCTFRETC4gIFJlbW92ZSBYTUxTRUMtU1JDLUxJQlJF T0ZGSUNFLgpSZXBsYWNlIExJQkpQRUcgd2l0aCBMSUJKUEVHLVRVUkJPLgpb YXJndW1lbnRzXTogUmVtb3ZlIHhtbHNlYyBjb2RlIGZyb20gUFJFUEFSRS1T UkMtUEhBU0UuICBNYWtlIHN1cmUgR1BHTUUrKwpoZWFkZXJzIGFyZSBmb3Vu ZC4gIEFkZCB3b3JrYXJvdW5kIGZvciA8aHR0cHM6Ly9idWdzLmdlbnRvby5v cmcvNjQxODEyPi4gIEFkZAoiLS1kaXNhYmxlLXBkZml1bSIgdG8gIzpjb25m aWd1cmUtZmxhZ3MuCiogZ251L3BhY2thZ2VzL3htbC5zY20gKHhtbHNlYy1u c3MpOiBOZXcgcHVibGljIHZhcmlhYmxlLgotLS0KIGdudS9wYWNrYWdlcy9j aGVjay5zY20gICAgICAgfCAxNyArKysrKysrKysrKwogZ251L3BhY2thZ2Vz L2xpYnJlb2ZmaWNlLnNjbSB8IDcwICsrKysrKysrKysrKysrKysrKysrLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tCiBnbnUvcGFja2FnZXMveG1sLnNjbSAg ICAgICAgIHwgMTIgKysrKysrKy0KIDMgZmlsZXMgY2hhbmdlZCwgNTkgaW5z ZXJ0aW9ucygrKSwgNDAgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvZ251 L3BhY2thZ2VzL2NoZWNrLnNjbSBiL2dudS9wYWNrYWdlcy9jaGVjay5zY20K aW5kZXggMTI3NmMwZmRhLi45MmY0OTM1OTIgMTAwNjQ0Ci0tLSBhL2dudS9w YWNrYWdlcy9jaGVjay5zY20KKysrIGIvZ251L3BhY2thZ2VzL2NoZWNrLnNj bQpAQCAtMTU3LDYgKzE1NywyMyBAQCB1bml0IHRlc3RpbmcuICBUZXN0IG91 dHB1dCBpcyBpbiBYTUwgZm9yIGF1dG9tYXRpYyB0ZXN0aW5nIGFuZCBHVUkg YmFzZWQgZm9yCiBzdXBlcnZpc2VkIHRlc3RzLiIpCiAgICAgKGxpY2Vuc2Ug bGljZW5zZTpsZ3BsMi4xKSkpIDsgbm8gY29weXJpZ2h0IG5vdGljZXMuIExH UEwyLjEgaXMgaW4gdGhlIHRhcmJhbGwKIAorOzsgU29tZSBwYWNrYWdlcyBy ZXF1aXJlIHRoaXMgbmV3ZXIgdmVyc2lvbiBvZiBjcHB1bml0LiAgSG93ZXZl ciwgaXQgbmVlZHMKKzs7IEMrKzExIHN1cHBvcnQsIHdoaWNoIGlzIG5vdCBl bmFibGVkIGJ5IGRlZmF1bHQgaW4gb3VyIGN1cnJlbnQgR0NDLCBhbmQKKzs7 IHVwZGF0aW5nIGluLXBsYWNlIHdvdWxkIHJlcXVpcmUgYWRkaW5nIENYWEZM QUdTIHRvIG1hbnkgZGVwZW5kZW50IHBhY2thZ2VzLgorOzsgVGh1cywga2Vl cCBhcyBhIHNlcGFyYXRlIHZhcmlhYmxlIGZvciBub3cuCis7OyBUT0RPOiBS ZW1vdmUgdGhpcyB3aGVuIG91ciBkZWZhdWx0IEdDQyBpcyB1cGRhdGVkIHRv IDYgb3IgaGlnaGVyLgorKGRlZmluZS1wdWJsaWMgY3BwdW5pdC0xLjE0Cisg IChwYWNrYWdlCisgICAgKGluaGVyaXQgY3BwdW5pdCkKKyAgICAodmVyc2lv biAiMS4xNC4wIikKKyAgICAoc291cmNlIChvcmlnaW4KKyAgICAgICAgICAg ICAgKG1ldGhvZCB1cmwtZmV0Y2gpCisgICAgICAgICAgICAgICh1cmkgKHN0 cmluZy1hcHBlbmQgImh0dHBzOi8vZGV2LXd3dy5saWJyZW9mZmljZS5vcmcv c3JjLyIKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiY3Bw dW5pdC0iIHZlcnNpb24gIi50YXIuZ3oiKSkKKyAgICAgICAgICAgICAgKHNo YTI1NgorICAgICAgICAgICAgICAgKGJhc2UzMgorICAgICAgICAgICAgICAg ICIxMDI3Y3lmeDVnc2prZGthZjZjMnduamg2ODg4MmdydzhuNjcyMDE4Y2oz dnM5bHJobWl4IikpKSkpKQorCiAoZGVmaW5lLXB1YmxpYyBjYXRjaC1mcmFt ZXdvcmsKICAgKHBhY2thZ2UKICAgICAobmFtZSAiY2F0Y2giKQpkaWZmIC0t Z2l0IGEvZ251L3BhY2thZ2VzL2xpYnJlb2ZmaWNlLnNjbSBiL2dudS9wYWNr YWdlcy9saWJyZW9mZmljZS5zY20KaW5kZXggNzk5YjA2MjQzLi40N2RkMjFi M2IgMTAwNjQ0Ci0tLSBhL2dudS9wYWNrYWdlcy9saWJyZW9mZmljZS5zY20K KysrIGIvZ251L3BhY2thZ2VzL2xpYnJlb2ZmaWNlLnNjbQpAQCAtNyw3ICs3 LDcgQEAKIDs7OyBDb3B5cmlnaHQgwqkgMjAxNyBUb2JpYXMgR2VlcmluY2t4 LVJpY2UgPG1lQHRvYmlhcy5ncj4KIDs7OyBDb3B5cmlnaHQgwqkgMjAxNyBB bmR5IFdpbmdvIDx3aW5nb0BpZ2FsaWEuY29tPgogOzs7IENvcHlyaWdodCDC qSAyMDE3IEx1ZG92aWMgQ291cnTDqHMgPGx1ZG9AZ251Lm9yZz4KLTs7OyBD b3B5cmlnaHQgwqkgMjAxNyBNYXJpdXMgQmFra2UgPG1iYWtrZUBmYXN0bWFp bC5jb20+Cis7OzsgQ29weXJpZ2h0IMKpIDIwMTcsIDIwMTggTWFyaXVzIEJh a2tlIDxtYmFra2VAZmFzdG1haWwuY29tPgogOzs7IENvcHlyaWdodCDCqSAy MDE3IFJ1dGdlciBIZWxsaW5nIDxyaGVsbGluZ0BteWtvbGFiLmNvbT4KIDs7 OwogOzs7IFRoaXMgZmlsZSBpcyBwYXJ0IG9mIEdOVSBHdWl4LgpAQCAtNTQs NiArNTQsNyBAQAogICAjOnVzZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBnbGli KQogICAjOnVzZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBnbm9tZSkKICAgIzp1 c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgZ3BlcmYpCisgICM6dXNlLW1vZHVs ZSAoZ251IHBhY2thZ2VzIGdudXBnKQogICAjOnVzZS1tb2R1bGUgKGdudSBw YWNrYWdlcyBnbnV6aWxsYSkKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2Fn ZXMgZ3N0cmVhbWVyKQogICAjOnVzZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBn dGspCkBAIC04MzksMjIgKzg0MCwxMCBAQCBhbmQgdG8gcmV0dXJuIGluZm9y bWF0aW9uIG9uIHByb251bmNpYXRpb25zLCBtZWFuaW5ncyBhbmQgc3lub255 bXMuIikKICAgICAobGljZW5zZSAobm9uLWNvcHlsZWZ0ICJmaWxlOi8vQ09Q WUlORyIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICJTZWUgQ09QWUlO RyBpbiB0aGUgZGlzdHJpYnV0aW9uLiIpKSkpCiAKLTs7IExpYnJlT2ZmaWNl IHJlcXVpcmVzIGFuIHhtbHNlYyBzb3VyY2UgdGFyYmFsbDsgaXQgZG9lcyBu b3QgZXZlbiBjaGVjawotOzsgZm9yIHRoZSBwcmVzZW5jZSBvZiBhbiBleHRl cm5hbGx5IGNvbXBpbGVkIGxpYnJhcnkuCi0oZGVmaW5lIHhtbHNlYy1zcmMt bGlicmVvZmZpY2UKLSAgKG9yaWdpbgotICAgIChtZXRob2QgdXJsLWZldGNo KQotICAgICh1cmkKLSAgICAgIChzdHJpbmctYXBwZW5kCi0gICAgICAgImh0 dHA6Ly9kZXYtd3d3LmxpYnJlb2ZmaWNlLm9yZy9zcmMvIgotICAgICAgICI4 NmIxZGFhYTQzOGY1YTdiZWE5YTUyZDdiOTc5OWFjMC14bWxzZWMxLTEuMi4y My50YXIuZ3oiKSkKLSAgICAoc2hhMjU2IChiYXNlMzIKLSAgICAgICAgICAg ICAiMTdxZnc1Y3JrcW40djZ4YmtqeHJqdmNjY2ZjMDBkeTA1Mzg5Mndyd3Y1 NHFkazhuN20yMSIpKSkpCi0KIChkZWZpbmUtcHVibGljIGxpYnJlb2ZmaWNl CiAgIChwYWNrYWdlCiAgICAgKG5hbWUgImxpYnJlb2ZmaWNlIikKLSAgICAo dmVyc2lvbiAiNS4zLjcuMiIpCisgICAgKHZlcnNpb24gIjUuNC41LjEiKQog ICAgIChzb3VyY2UKICAgICAgKG9yaWdpbgogICAgICAgKG1ldGhvZCB1cmwt ZmV0Y2gpCkBAIC04NjMsMTYgKzg1MiwxMSBAQCBhbmQgdG8gcmV0dXJuIGlu Zm9ybWF0aW9uIG9uIHByb251bmNpYXRpb25zLCBtZWFuaW5ncyBhbmQgc3lu b255bXMuIikKICAgICAgICAgICAiaHR0cHM6Ly9kb3dubG9hZC5kb2N1bWVu dGZvdW5kYXRpb24ub3JnL2xpYnJlb2ZmaWNlL3NyYy8iCiAgICAgICAgICAg KHZlcnNpb24tcHJlZml4IHZlcnNpb24gMykgIi9saWJyZW9mZmljZS0iIHZl cnNpb24gIi50YXIueHoiKSkKICAgICAgIChzaGEyNTYgKGJhc2UzMgotICAg ICAgICAgICAgICAgIjB6N2Zzc3AwamNqMDl3eGFkMXdtaHk2OW43MWEybXds OTMzbHhwOWR6NXNkdnpuY3hteTMiKSkpKQorICAgICAgICAgICAgICAgIjE2 N2JoNmpneWhmY3ZuM2c3eGdoa2c0bmI5OWg5MWRpeXBkbHJ5NWRmMjF4czhi aXM1Z2IiKSkpKQogICAgIChidWlsZC1zeXN0ZW0gZ251LWJ1aWxkLXN5c3Rl bSkKICAgICAobmF0aXZlLWlucHV0cwotICAgICBgKDs7IGF1dG9yZWNvbmYg aXMgcnVuIGJ5IHRoZSBMaWJyZU9mZmljZSBidWlsZCBzeXN0ZW0sIHNpbmNl IGFmdGVyCi0gICAgICAgOzsgdW5wYWNraW5nIHRoZSBleHRlcm5hbCB4bWxz ZWMgdGFyYmFsbCwgaXQgYXBwbGllcyBhIHNlcmllcyBvZgotICAgICAgIDs7 IHBhdGNoZXMgdG8gTWFrZWZpbGUuYW0sIGNvbmZpZ3VyZS5pbiwgY29uZmln Lmd1ZXNzIGFuZCBjb25maWcuc3ViLgotICAgICAgICgiYXV0b2NvbmYiICxh dXRvY29uZikKLSAgICAgICAoImF1dG9tYWtlIiAsYXV0b21ha2UpCi0gICAg ICAgKCJiaXNvbiIgLGJpc29uKQotICAgICAgICgiY3BwdW5pdCIgLGNwcHVu aXQpCisgICAgIGAoKCJiaXNvbiIgLGJpc29uKQorICAgICAgICgiY3BwdW5p dCIgLGNwcHVuaXQtMS4xNCkKICAgICAgICAoImZsZXgiICxmbGV4KQogICAg ICAgICgicGtnLWNvbmZpZyIgLHBrZy1jb25maWcpCiAgICAgICAgKCJweXRo b24iICxweXRob24td3JhcHBlcikKQEAgLTg4OCw2ICs4NzIsNyBAQCBhbmQg dG8gcmV0dXJuIGluZm9ybWF0aW9uIG9uIHByb251bmNpYXRpb25zLCBtZWFu aW5ncyBhbmQgc3lub255bXMuIikKICAgICAgICAoImdsZXciICxnbGV3KQog ICAgICAgICgiZ2xtIiAsZ2xtKQogICAgICAgICgiZ3BlcmYiICxncGVyZikK KyAgICAgICAoImdwZ21lIiAsZ3BnbWUpCiAgICAgICAgKCJncmFwaGl0ZTIi ICxncmFwaGl0ZTIpCiAgICAgICAgKCJnc3QtcGx1Z2lucy1iYXNlIiAsZ3N0 LXBsdWdpbnMtYmFzZSkKICAgICAgICAoImd0aysiICxndGsrKQpAQCAtODk3 LDEyICs4ODIsMTQgQEAgYW5kIHRvIHJldHVybiBpbmZvcm1hdGlvbiBvbiBw cm9udW5jaWF0aW9ucywgbWVhbmluZ3MgYW5kIHN5bm9ueW1zLiIpCiAgICAg ICAgKCJsaWJhYnciICxsaWJhYncpCiAgICAgICAgKCJsaWJjZHIiICxsaWJj ZHIpCiAgICAgICAgKCJsaWJjbWlzIiAsbGliY21pcykKLSAgICAgICAoImxp YmpwZWciICxsaWJqcGVnKQorICAgICAgICgibGlianBlZy10dXJibyIgLGxp YmpwZWctdHVyYm8pCiAgICAgICAgKCJsaWJlLWJvb2siICxsaWJlLWJvb2sp CiAgICAgICAgKCJsaWJldG9ueWVrIiAsbGliZXRvbnllaykKICAgICAgICAo ImxpYmV4dHRleHRjYXQiICxsaWJleHR0ZXh0Y2F0KQogICAgICAgICgibGli ZnJlZWhhbmQiICxsaWJmcmVlaGFuZCkKICAgICAgICAoImxpYmxhbmd0YWci ICxsaWJsYW5ndGFnKQorICAgICAgIDs7IFhYWDogUGVyaGFwcyB0aGlzIHNo b3VsZCBiZSBwcm9wYWdhdGVkIGZyb20geG1sc2VjLgorICAgICAgICgibGli bHRkbCIgLGxpYmx0ZGwpCiAgICAgICAgKCJsaWJtc3B1YiIgLGxpYm1zcHVi KQogICAgICAgICgibGlibXdhdyIgLGxpYm13YXcpCiAgICAgICAgKCJsaWJv ZGZnZW4iICxsaWJvZGZnZW4pCkBAIC05MzUsNyArOTIyLDcgQEAgYW5kIHRv IHJldHVybiBpbmZvcm1hdGlvbiBvbiBwcm9udW5jaWF0aW9ucywgbWVhbmlu Z3MgYW5kIHN5bm9ueW1zLiIpCiAgICAgICAgKCJ1bml4b2RiYyIgLHVuaXhv ZGJjKQogICAgICAgICgidW56aXAiICx1bnppcCkKICAgICAgICAoInZpZ3Jh IiAsdmlncmEpCi0gICAgICAgKCJ4bWxzZWMtc3JjIiAseG1sc2VjLXNyYy1s aWJyZW9mZmljZSkKKyAgICAgICAoInhtbHNlYyIgLHhtbHNlYy1uc3MpCiAg ICAgICAgKCJ6aXAiICx6aXApKSkKICAgICAoYXJndW1lbnRzCiAgICAgIGAo Izp0ZXN0cz8gI2YgOyBCdWlsZGluZyB0aGUgdGVzdHMgYWxyZWFkeSBmYWls cy4KQEAgLTk0NCwyNiArOTMxLDI3IEBAIGFuZCB0byByZXR1cm4gaW5mb3Jt YXRpb24gb24gcHJvbnVuY2lhdGlvbnMsIG1lYW5pbmdzIGFuZCBzeW5vbnlt cy4iKQogICAgICAgICAgKG1vZGlmeS1waGFzZXMgJXN0YW5kYXJkLXBoYXNl cwogICAgICAgICAgICAoYWRkLWJlZm9yZSAnY29uZmlndXJlICdwcmVwYXJl LXNyYwogICAgICAgICAgICAgIChsYW1iZGEqICgjOmtleSBpbnB1dHMgIzph bGxvdy1vdGhlci1rZXlzKQotICAgICAgICAgICAgICAgKGxldCAoKHhtbHNl YyAoYXNzb2MtcmVmIGlucHV0cyAieG1sc2VjLXNyYyIpKSkKKyAgICAgICAg ICAgICAgIChsZXQgKChncGdtZSAoYXNzb2MtcmVmIGlucHV0cyAiZ3BnbWUi KSkpCiAgICAgICAgICAgICAgICAgIChzdWJzdGl0dXRlKgogICAgICAgICAg ICAgICAgICAgIChsaXN0ICJzeXN1aS9DdXN0b21UYXJnZXRfc2hhcmUubWsi CiAgICAgICAgICAgICAgICAgICAgICAgICAgInNvbGVudi9nYnVpbGQvZ2J1 aWxkLm1rIgogICAgICAgICAgICAgICAgICAgICAgICAgICJzb2xlbnYvZ2J1 aWxkL3BsYXRmb3JtL3VueGdjYy5tayIpCiAgICAgICAgICAgICAgICAgICAg KCgiL2Jpbi9zaCIpICh3aGljaCAic2giKSkpCi0gICAgICAgICAgICAgICAg IChta2RpciAiZXh0ZXJuYWwvdGFyYmFsbHMiKQotICAgICAgICAgICAgICAg ICAoc3ltbGluawotICAgICAgICAgICAgICAgICAgIHhtbHNlYwotICAgICAg ICAgICAgICAgICAgIChzdHJpbmctYXBwZW5kICJleHRlcm5hbC90YXJiYWxs cy8iCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIjg2YjFk YWFhNDM4ZjVhN2JlYTlhNTJkN2I5Nzk5YWMwLSIKLSAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAieG1sc2VjMS0xLjIuMjMudGFyLmd6Iikp Ci0gICAgICAgICAgICAgICAgIDs7IFRoZSBmb2xsb3dpbmcgaXMgcmVxdWly ZWQgZm9yIGJ1aWxkaW5nIHhtbHNlYyBmcm9tIHRoZQotICAgICAgICAgICAg ICAgICA7OyB1bnBhdGNoZWQgZXh0ZXJuYWwgdGFyYmFsbDsgc2luY2UgImNv bmZpZ3VyZSIgc3RhcnRzIHdpdGgKLSAgICAgICAgICAgICAgICAgOzsgIi9i aW4vc2giLCBpdCBuZWVkcyB0byBiZSBleGVjdXRlZCBieSBhIGNvbW1hbmQg aW52b2tpbmcKLSAgICAgICAgICAgICAgICAgOzsgdGhlIHNoZWxsLgotICAg ICAgICAgICAgICAgICAoc2V0ZW52ICJTSEVMTCIgKHdoaWNoICJiYXNoIikp Ci0gICAgICAgICAgICAgICAgIChzZXRlbnYgIkNPTkZJR19TSEVMTCIgKHdo aWNoICJiYXNoIikpCi0gICAgICAgICAgICAgICAgIChzdWJzdGl0dXRlKiAi ZXh0ZXJuYWwvbGlieG1sc2VjL0V4dGVybmFsUHJvamVjdF94bWxzZWMubWsi Ci0gICAgICAgICAgICAgICAgICAgKCgiLi9jb25maWd1cmUiKSAiJChDT05G SUdfU0hFTEwpIC4vY29uZmlndXJlIiApKQorCisgICAgICAgICAgICAgICAg IDs7IEdQR01FKysgaGVhZGVycyBhcmUgaW5zdGFsbGVkIGluIGEgZ3BnbWUr KyBzdWJkaXJlY3RvcnksCisgICAgICAgICAgICAgICAgIDs7IGJ1dCBmaWxl cyBpbiAieG1sc2VjdXJpdHkvc291cmNlL2dwZy8iIGV4cGVjdCB0byBmaW5k IHRoZW0KKyAgICAgICAgICAgICAgICAgOzsgb24gdGhlIGluY2x1ZGUgcGF0 aCB3aXRob3V0IGEgcHJlZml4LgorICAgICAgICAgICAgICAgICAoc3Vic3Rp dHV0ZSogInhtbHNlY3VyaXR5L0xpYnJhcnlfeHNlY194bWxzZWMubWsiCisg ICAgICAgICAgICAgICAgICAgKCgiXFwkXFwkXFwoSU5DTFVERVxcKSIpCisg ICAgICAgICAgICAgICAgICAgIChzdHJpbmctYXBwZW5kICIkJChJTkNMVURF KSAtSSIgZ3BnbWUgIi9pbmNsdWRlL2dwZ21lKysiKSkpCisKKyAgICAgICAg ICAgICAgICAgOzsgWFhYOiBXaGVuIEdUSzIgaXMgZGlzYWJsZWQsIG9uZSBo ZWFkZXIgZmlsZSBpcyBub3QgaW5jbHVkZWQuCisgICAgICAgICAgICAgICAg IDs7IFRoaXMgaXMgbGlrZWx5IGZpeGVkIGluIGxhdGVyIHZlcnNpb25zLiAg U2VlIGFsc28KKyAgICAgICAgICAgICAgICAgOzsgPGh0dHBzOi8vYnVncy5n ZW50b28ub3JnLzY0MTgxMj4uCisgICAgICAgICAgICAgICAgIChzdWJzdGl0 dXRlKiAidmNsL3VueC9ndGszL2d0azNndGtmcmFtZS5jeHgiCisgICAgICAg ICAgICAgICAgICAgKCgiI2luY2x1ZGUgPHVueC9ndGsvZ3RrZ2RpLmh4eD4i KQorICAgICAgICAgICAgICAgICAgICAiI2luY2x1ZGUgPHVueC9ndGsvZ3Rr Z2RpLmh4eD5cbiNpbmNsdWRlIDx1bngvZ3RrL2d0a3NhbG1lbnUuaHh4PiIp KQorCiAgICAgICAgICAgICAgICAgICN0KSkpCiAgICAgICAgICAgIChhZGQt YWZ0ZXIgJ2luc3RhbGwgJ2Jpbi1hbmQtZGVza3RvcC1pbnN0YWxsCiAgICAg ICAgICAgICAgOzsgQ3JlYXRlICdzb2ZmaWNlJyBhbmQgJ2xpYnJlb2ZmaWNl JyBzeW1saW5rcyB0byB0aGUgZXhlY3V0YWJsZQpAQCAtMTAzNyw2ICsxMDI1 LDEwIEBAIGFuZCB0byByZXR1cm4gaW5mb3JtYXRpb24gb24gcHJvbnVuY2lh dGlvbnMsIG1lYW5pbmdzIGFuZCBzeW5vbnltcy4iKQogICAgICAgICAgICIt LWRpc2FibGUtY29pbm1wIgogICAgICAgICAgICItLWRpc2FibGUtZmlyZWJp cmQtc2RiYyIgOyBlbWJlZGRlZCBmaXJlYmlyZAogICAgICAgICAgICItLWRp c2FibGUtZ2x0ZiIKKyAgICAgICAgICA7OyBYWFg6IFBERml1bSBzdXBwb3J0 IHJlcXVpcmVzIGZldGNoaW5nIGFuIGV4dGVybmFsIHRhcmJhbGwgYW5kCisg ICAgICAgICAgOzsgcGF0Y2hpbmcgdGhlIGJ1aWxkIHNjcmlwdHMgdG8gd29y ayB3aXRoIEdDQzUuICBUcnkgZW5hYmxpbmcgdGhpcworICAgICAgICAgIDs7 IHdoZW4gb3VyIGRlZmF1bHQgY29tcGlsZXIgaXMgPj1HQ0MgNi4KKyAgICAg ICAgICAiLS1kaXNhYmxlLXBkZml1bSIKICAgICAgICAgICAiLS1kaXNhYmxl LWd0ayIgOyBkaXNhYmxlIHVzZSBvZiBHVEsrIDIKICAgICAgICAgICAiLS13 aXRob3V0LWRveHlnZW4iKSkpCiAgICAgKGhvbWUtcGFnZSAiaHR0cHM6Ly93 d3cubGlicmVvZmZpY2Uub3JnLyIpCmRpZmYgLS1naXQgYS9nbnUvcGFja2Fn ZXMveG1sLnNjbSBiL2dudS9wYWNrYWdlcy94bWwuc2NtCmluZGV4IGEwOTM3 NTgyZi4uMzljZmM0NTMwIDEwMDY0NAotLS0gYS9nbnUvcGFja2FnZXMveG1s LnNjbQorKysgYi9nbnUvcGFja2FnZXMveG1sLnNjbQpAQCAtMTMsNyArMTMs NyBAQAogOzs7IENvcHlyaWdodCDCqSAyMDE2IEphbiBOaWV1d2VuaHVpemVu IDxqYW5uZWtlQGdudS5vcmc+CiA7OzsgQ29weXJpZ2h0IMKpIDIwMTYsIDIw MTcgbmcwIDxjb250YWN0Lm5nMEBjcnlwdG9sYWIubmV0PgogOzs7IENvcHly aWdodCDCqSAyMDE2LCAyMDE3LCAyMDE4IFRvYmlhcyBHZWVyaW5ja3gtUmlj ZSA8bWVAdG9iaWFzLmdyPgotOzs7IENvcHlyaWdodCDCqSAyMDE2LCAyMDE3 IE1hcml1cyBCYWtrZSA8bWJha2tlQGZhc3RtYWlsLmNvbT4KKzs7OyBDb3B5 cmlnaHQgwqkgMjAxNiwgMjAxNywgMjAxOCBNYXJpdXMgQmFra2UgPG1iYWtr ZUBmYXN0bWFpbC5jb20+CiA7OzsgQ29weXJpZ2h0IMKpIDIwMTcgQWRyaWFu byBQZWx1c28gPGNhdG9uYW5vQGdtYWlsLmNvbT4KIDs7OyBDb3B5cmlnaHQg wqkgMjAxNyBHcmVnb3IgR2llc2VuIDxnaWVzZW5AemFlaGx3ZXJrLm5ldD4K IDs7OyBDb3B5cmlnaHQgwqkgMjAxNyBBbGV4IFZvbmcgPGFsZXh2b25nMTk5 NUBnbWFpbC5jb20+CkBAIC00MCw2ICs0MCw3IEBACiAgICM6dXNlLW1vZHVs ZSAoZ251IHBhY2thZ2VzIGF1dG90b29scykKICAgIzp1c2UtbW9kdWxlIChn bnUgcGFja2FnZXMgY29tcHJlc3Npb24pCiAgICM6dXNlLW1vZHVsZSAoZ251 IHBhY2thZ2VzIGdudXBnKQorICAjOnVzZS1tb2R1bGUgKGdudSBwYWNrYWdl cyBnbnV6aWxsYSkKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgcGVy bCkKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgcGVybC1jaGVjaykK ICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgcHl0aG9uKQpAQCAtOTcw LDYgKzk3MSwxNSBAQCBMaWJ4bWwyKS4iKQogICAgIChsaWNlbnNlIChsaWNl bnNlOngxMS1zdHlsZSAiZmlsZTovL0NPUFlJTkciCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICJTZWUgJ0NPUFlJTkcnIGluIHRoZSBkaXN0 cmlidXRpb24uIikpKSkKIAorKGRlZmluZS1wdWJsaWMgeG1sc2VjLW5zcwor ICAocGFja2FnZQorICAgIChpbmhlcml0IHhtbHNlYykKKyAgICAobmFtZSAi eG1sc2VjLW5zcyIpCisgICAgKGlucHV0cworICAgICBgKCgibnNzIiAsbnNz KQorICAgICAgICgibGlibHRkbCIgLGxpYmx0ZGwpKSkKKyAgICAoc3lub3Bz aXMgIlhNTCBTZWN1cml0eSBMaWJyYXJ5ICh1c2luZyBOU1MgaW5zdGVhZCBv ZiBHbnVUTFMpIikpKQorCiAoZGVmaW5lLXB1YmxpYyBtaW5peG1sCiAgIChw YWNrYWdlCiAgICAgKG5hbWUgIm1pbml4bWwiKQotLSAKMi4xNi4xCgo= --_----------=_15183617391764452--