Received: from eu-smtp-delivery-130.mimecast.com (eu-smtp-delivery-130.mimecast.com [185.58.85.130]) by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id F15762232DC for <~alpine/devel@lists.alpinelinux.org>; Mon, 3 Apr 2023 11:15:43 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=proximity.fr; s=mimecast20220120; t=1680520543; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=L/FWxFhsrs2KKrcjFxtdyA/gzdNBhsgR978zRrfhS8U=; b=hNrbcYXrpA+JEl6uj2L/o/IbaVhztaN3xnhaFut+CWFpAMCCCFdTqYgJPj3rIaKhEpPSG4 BWZDaAGam1zDKsbQQCcDorqF+FnMk+FulKhRpUQa/3dU5FWeb//hiklfd9jRKz1gyQXlOI RD6yGiDmnV2XMEmaqN8FeS0UrwVpqpUZXCN/sr8JWyx0dGQeHsldc4ZIB+vqvZbUqJ2de+ UXI+TzWs3Awef4RbOJ9WKI7Lk8q4Rp5Od/3XhRcVAKYwG19LPAD7vHhbt2Az4LRXUefp2b 04JY+7wXphn9QouilKsJfivS5jwWZA0lVSgsTFKfG6T+tefrHHVQ9but4CIGzw== Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2172.outbound.protection.outlook.com [104.47.55.172]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id uk-mta-150-PuaO9UojO_yVXJmCVTHANA-2; Mon, 03 Apr 2023 12:15:38 +0100 X-MC-Unique: PuaO9UojO_yVXJmCVTHANA-2 Received: from SN1PR18MB2093.namprd18.prod.outlook.com (2603:10b6:802:30::19) by DM5PR18MB1050.namprd18.prod.outlook.com (2603:10b6:3:2f::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6254.33; Mon, 3 Apr 2023 11:15:34 +0000 Received: from SN1PR18MB2093.namprd18.prod.outlook.com ([fe80::f2c7:8369:1774:8d7e]) by SN1PR18MB2093.namprd18.prod.outlook.com ([fe80::f2c7:8369:1774:8d7e%4]) with mapi id 15.20.6254.033; Mon, 3 Apr 2023 11:15:34 +0000 From: "Haidar Deenmahomed (Proximity-Paris)" To: alice , "~alpine/devel@lists.alpinelinux.org" <~alpine/devel@lists.alpinelinux.org> CC: "Kavish Roseeawon (Proximity-Paris)" , "Alex Lacour (Proximity-Paris)" , "Bonie Kathiana Coder (Proximity-Paris)" , "Akshini Sibartie (Proximity-Paris)" Subject: RE: [Vulnerability] CVE-2023-0464 Thread-Topic: [Vulnerability] CVE-2023-0464 Thread-Index: AdlmHExIBOnKmT+nTmmK9CxBDngb5QAACjGwAAA60AAAAAsGQA== Date: Mon, 3 Apr 2023 11:15:34 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SN1PR18MB2093:EE_|DM5PR18MB1050:EE_ x-ms-office365-filtering-correlation-id: ffbfa2a4-5096-49a7-e2da-08db3434be84 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0 x-microsoft-antispam-message-info: RupRACFPoWCCuQcFrc/aph6JirUrt91vCi2IsvFw5BKQNg/IES5P69EoQ3wEdy/ubqG+IeZk0PkgGgaRWRVb4quftCqVu9t4xdHhiZgM3noz4FtIe092S6sDEa/4dkTr5WiBJOq3r9+sptyWB4BCufL4+x0BhhHkFKypvtHfMzSVRZ+eKYPL1KtxOHblaekMAGPmqO7YCgPg/Hpt3lREc8OLwcyklFPhGjjcJ7R6OwQ15WkW4IK7UYuAQVF2E1cV/mwAoSevdD48hkKPsUKWDALXJbCwHfVng+3VQNDrhbEMj+O18RoTYIxV9zUdPE6FZgm0XDLfeWIWiWPO3OOT+WZ1kN7hL4H6Yo21PKl/00xBZxZgaDXYXdVJPatgq7sQvVQinXTcsgSUq/DWVHL46ySmyU08uxPbbmLL2P+OBrDnh2WCK1E+mOjMaC7+QKAoFn/ftkIdB3j0jp7ju/JVXx0GRS9ciav144NkIJasmiWQ+XPcpnGkIbk4ncADUyuLPqlzIn55ntptzvNFt/qEEAD3AD09oB0dM8IbEeSpwIPF7GpQfc418s1AcDetE8Wowekg5Pd13R/8EfZspZLA1iu3OpvXHbSL66pftw7j3ys= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN1PR18MB2093.namprd18.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230028)(4636009)(366004)(39860400002)(346002)(376002)(396003)(136003)(451199021)(4326008)(41300700001)(66446008)(64756008)(82960400001)(86362001)(38070700005)(122000001)(38100700002)(966005)(53546011)(83380400001)(9686003)(186003)(6506007)(26005)(107886003)(5660300002)(52536014)(8676002)(8936002)(54906003)(316002)(110136005)(478600001)(66476007)(76116006)(66946007)(66556008)(71200400001)(33656002)(7696005)(2906002)(55016003);DIR:OUT;SFP:1101 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?V3N0QW1KOENObVVNNmhYM2xTL2ZJZUVEZVJqTXllVzEzQmNkNlBEOXFLcEpR?= =?utf-8?B?UFdBK0hBS2taclY1UG1LUWVpbjJScUlDRmg5TmZMWmxtODc2T05qeWh3NTVO?= =?utf-8?B?WWtVRHpLUnpiYncvcWdJeE0vVllEbndrYlpsZVp2VVdsd0JGczZuMzYvVkYy?= =?utf-8?B?b3o1Um84VjJQSFlYeXE4MVFNMm0wZXBZdFZFbzBrbm5XaEwxUG9kMkdWVVhE?= =?utf-8?B?c3FIQ25XM1IwUmlPQWpWc0Y3VkxuWkhaMFdFWEt3S3JTUGErVU51cUNSOGIv?= =?utf-8?B?VzQwS2piNFh4TTN1dVUwcDdvN2ZZZ1k3bjZFSVcwSG54NkJxdWFQNG1uQ0xm?= =?utf-8?B?a3cvZk1hb2xNRmtTY3NlMS9Ha0I1dXRVTE80VW1JQ3g4UGhRZmxVZi94SWY0?= =?utf-8?B?Wkp6cDQvSmxpU3N1TGVUU0JEd3RqdEZrazZSczhRZlR0WTZGQitZdGhGdXph?= =?utf-8?B?YjQ4Wk93bk14YmxFZTdTMHJpblNXcTE3b2paUi9XdE1QKy94OVpMdzBMNUxE?= =?utf-8?B?dUh3cjBmbUZlb0NCKzVjL0VTV1hhcnBhVWxJZ1Y3bVZxTXlwSzEvbXEybGV2?= =?utf-8?B?bjlzQXEwRDF5d3M4dXZ3aHF6eFpuS0JWZlBITDBDaFZ4dzhiS2ZsNm9JdlBl?= =?utf-8?B?SjdGYmoyZEpsdGdQSHFPVk1ZeW5jd0p6MmI3bGlCNXZPWHVsRm9XNStxVmtm?= =?utf-8?B?Tll3VVY5b0tvZXdTVjBNdzVUTHc0bS9VV3VPWjZLb1NITVlnZHFDYlA0bXkx?= =?utf-8?B?SFZ5djZ5SG5MRDRYYlVRdThZYkVsU0dSMmpWYnh4UUpMY1hQSUFRVFR3UVZZ?= =?utf-8?B?bUMxWU1mMDNtc09lZ2x0eGpBek5uVHdKVkQ5OTVQOHNLVnBaTVAySDVyUDBr?= =?utf-8?B?d2lCbVBDRStubUIyaXQ2YXU3N3d2S1hmZFFHelVEbWlkZXlkYkVwRUU2MDY4?= =?utf-8?B?eDYzbCttR2lWTTQxRHNXOHlJWHVPelV0VVhmTXZOUmJ6cEdJaWU5eTdFUXlx?= =?utf-8?B?L3VaMCtzKzkzQUozNHBpTE05ekZvUm1xdHJDUHRvUENWUUhhbE5oY1l2b2tI?= =?utf-8?B?TytFdDZlR3hFZW1wbU5PTnl3Qk5yUlZ0Z25ka1pBTlFqYnhDUzltekJrQVdm?= =?utf-8?B?T0ZwKzZLRS8vQk9SMWk0a1hoRGN6MGNCMm9ZSnR4UlhuVXR3dklUb2pXRzVn?= =?utf-8?B?THgvMGh4NU1PbEJLVFlPM3JySE5NeEJVc3NrRW5rZ1ZSUDdVY1Y5Q3ZMSEFx?= =?utf-8?B?RGd4cjM3SWJiQVcxY3dVaGR5WUZSTzJIbmx3NjAwZXc2Qm9XMS9aRkR5SmZw?= =?utf-8?B?ZXRsWnZWZ2dTTXpTV29MUFYxdEdZUTN5UjkvQnlZZ3ZiQmM3YldTNlNYMXpI?= =?utf-8?B?OXNNeFFPRDhmdkFQV0REd1JBQWZ2a0w3SVh1N2Y2ODV5ajRkMVd0SFJ3cFpG?= =?utf-8?B?eUpDYTgwY01kQiszUytVZnlQbXcwblFQOFViRUp4cFBpWTJJUDFJTWRHUVYv?= =?utf-8?B?Qk9uYkU0dHA1WnQ0bk05aDQyNk9vUk1xVERJK0YxOTVCRVNyaHBHTlBtZ3k1?= =?utf-8?B?aWo3YzFOelM2NHNXdTdkSGwxUHh4bFdVMm1CVHBRZEozdjJ3SnBZSEd4RnVq?= =?utf-8?B?UkZ6YVVoLytiZHlWRnhtSkVDejBFOTFNQXk5N2NTNk8yMmFwNlVVRVFEVUk1?= =?utf-8?B?VjBFemppYVB1cnZVbjNHYURNK3ZaMVlzR3daNTVvNE9QMG1JaUQ1WmhOMnBi?= =?utf-8?B?bHpzUFBNdDExY09jWkRYSnVmUEpyLzhvWGJyZGh6MCtxQis5ZXRZdnBTQTYr?= =?utf-8?B?THJQOHVSc3Y1bGRkczZGMWRaaWw5aHo5MFloeXRsbWhUbXJnMlhVdGtzMTZH?= =?utf-8?B?VGJ3akEycVU5bEVPRmhESmdpTXEzSktSVGh1ME9WQ0dXSFZjR3hOVEc1YU1Z?= =?utf-8?B?MTh2N0ZQdjFvL293bU90bGVDd0JkTCt4cXhRSmVvWlpzWmYzWHVweVU4eUQ2?= =?utf-8?B?bWlUU2R4dlRiR0xRVEJuaDBOdStHSXQvNk9JR2pRdkFZOHoyMXRFTXJLTjRt?= =?utf-8?B?dVBsU09xNWxnUlhIRUhTZ3U1U3A4TTVtUVVRWTJTdmVkVnRXRDV1UHlwQUFZ?= =?utf-8?B?OFVvMjdobmFQRXRBUEdhYy9JYjFGVitiVUhqbGVoUjVkSm9sUkVPQ3J3Z3Mx?= =?utf-8?B?R3c9PQ==?= MIME-Version: 1.0 X-OriginatorOrg: proximity.fr X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN1PR18MB2093.namprd18.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ffbfa2a4-5096-49a7-e2da-08db3434be84 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Apr 2023 11:15:34.1907 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 41eb501a-f671-4ce0-a5bf-b64168c3705f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: MR7OmKIjSRsawpHVNU5sQFPBQP+IDFEg5v8+GtxDl3TPMYsfNJpHhTHwQ9kNBXoycAFggsPyErPl9afajkIQdMSKJbJjA+zKsgT+qGxd4aU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR18MB1050 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: proximity.fr Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 DQpUaGFua3MgZm9yIHlvdXIgcHJvbXB0IHJlcGx5Lg0KDQoNCldpbGwgY2hlY2sgaXQuDQoNCg0K Q2hlZXJzLA0KSGFpZGFyDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBhbGlj ZSA8YWxpY2VAYXlheWEuZGV2Pg0KU2VudDogTW9uZGF5LCAzIEFwcmlsIDIwMjMgMTU6MTQNClRv OiBIYWlkYXIgRGVlbm1haG9tZWQgKFByb3hpbWl0eS1QYXJpcykgPGhhaWRhci5kZWVubWFob21l ZEBwcm94aW1pdHkuZnI+OyB+YWxwaW5lL2RldmVsQGxpc3RzLmFscGluZWxpbnV4Lm9yZw0KQ2M6 IEthdmlzaCBSb3NlZWF3b24gKFByb3hpbWl0eS1QYXJpcykgPGthdmlzaC5yb3NlZWF3b25AcHJv eGltaXR5LmZyPjsgQWxleCBMYWNvdXIgKFByb3hpbWl0eS1QYXJpcykgPGFsZXgubGFjb3VyQHBy b3hpbWl0eS5mcj47IEJvbmllIEthdGhpYW5hIENvZGVyIChQcm94aW1pdHktUGFyaXMpIDxib25p ZS5jb2RlckBwcm94aW1pdHkuZnI+OyBBa3NoaW5pIFNpYmFydGllIChQcm94aW1pdHktUGFyaXMp IDxha3NoaW5pLnNpYmFydGllQHByb3hpbWl0eS5mcj4NClN1YmplY3Q6IFJlOiBbVnVsbmVyYWJp bGl0eV0gQ1ZFLTIwMjMtMDQ2NA0KDQpPbiBNb24gQXByIDMsIDIwMjMgYXQgMTowNyBQTSBDRVNU LCBIYWlkYXIgRGVlbm1haG9tZWQgKFByb3hpbWl0eS1QYXJpcykgd3JvdGU6DQo+DQo+IEhlbGxv LA0KPg0KPiBJIGFtIHdyaXRpbmcgdG8gYnJpbmcgdG8geW91ciBhdHRlbnRpb24gYSBzZWN1cml0 eSB2dWxuZXJhYmlsaXR5IHRoYXQNCj4gd2FzIGlkZW50aWZpZWQgd2hpbGUgcnVubmluZyBKZnJv ZyBTY2FuIG9uIGEgZG9ja2VyIGltYWdlIGJhc2VkIG9uDQo+IEFscGluZSAzLjE3LiBUaGUNCg0K ImJhc2VkIG9uIiBpbXBsaWVzICJub3RoaW5nIHRvIGRvIHdpdGggdXMiLCBhcyBpdCdzIG5vdCBq dXN0IHRoZSAiYmFzZSBpbWFnZSIuDQp0aGUgMy4xNy4zIGltYWdlIGhhcyB0aGlzIGZpeGVkIGFs cmVhZHkuDQoNCj4gc2NhbiBoaWdobGlnaHRlZCBDVkUtMjAyMy0wNDY0LCB3aGljaCBoYXMgdGhl IHBvdGVudGlhbCB0byBjcmVhdGUgYQ0KPiBkZW5pYWwtb2YtIHNlcnZpY2UgKERvUykgYXR0YWNr IG9uIGFmZmVjdGVkIHN5c3RlbXMuDQoNCml0IHdhcyBmaXhlZCBpbiBvcGVuc3NsIDMuMC44LXIx LCBodHRwczovL3NlY3VyaXR5LmFscGluZWxpbnV4Lm9yZy92dWxuL0NWRS0yMDIzLTA0NjQsDQoy IHdlZWtzIGFnby4gYGFwayB1cGdyYWRlYCBpcyBhbGwgb25lIG5lZWRzLg0KDQo+IEkgd291bGQg bGlrZSB0byBrbm93IGlmIHRoZXJlIGlzIGFuIGVzdGltYXRlIG9mIHdoZW4gdGhpcw0KPiB2dWxu ZXJhYmlsaXR5IHdpbGwgYmUgYWRkcmVzc2VkIG9yIGFueSBkb2N1bWVudGF0aW9uIHRoYXQgb3V0 bGluZXMgdGhlDQo+IHRpbWUgZXN0aW1hdGVzIGZvciBmaXhpbmcgc3VjaCBpc3N1ZXMuIFBsZWFz ZSBsZXQgbWUga25vdyBpZiB0aGVyZSBhcmUNCj4gYW55IGFjdGlvbnMgSSBjYW4gdGFrZSB0byBo ZWxwIG1pdGlnYXRlIHRoaXMgcmlzayBpbiB0aGUgbWVhbnRpbWUuDQo+DQo+IFRoYW5rIHlvdSBm b3IgeW91ciBwcm9tcHQgYXR0ZW50aW9uIHRvIHRoaXMgbWF0dGVyLg0KPg0KPiBCZXN0IHJlZ2Fy ZHMsDQo+IEhhaWRhcg0KPg0KPiBUaGlzIGVtYWlsIGlzIGludGVuZGVkIG9ubHkgZm9yIHRoZSBw ZXJzb24gb3IgZW50aXR5IHRvIHdoaWNoIGl0IGlzDQo+IGFkZHJlc3NlZCBhbmQgbWF5IGNvbnRh aW4gaW5mb3JtYXRpb24gdGhhdCBpcyBwcml2aWxlZ2VkLCBjb25maWRlbnRpYWwNCj4gb3Igb3Ro ZXJ3aXNlIHByb3RlY3RlZCBmcm9tIGRpc2Nsb3N1cmUuIERpc3NlbWluYXRpb24sIGRpc3RyaWJ1 dGlvbiwNCj4gb3IgY29weWluZyBvZiB0aGlzIGVtYWlsIG9yIHRoZSBpbmZvcm1hdGlvbiBoZXJl aW4gYnkgYW55b25lIG90aGVyDQo+IHRoYW4gdGhlIGludGVuZGVkIHJlY2lwaWVudCwgb3IgYW4g ZW1wbG95ZWUgb3IgYWdlbnQgcmVzcG9uc2libGUgZm9yDQo+IGRlbGl2ZXJpbmcgdGhlIG1lc3Nh Z2UgdG8gdGhlIGludGVuZGVkIHJlY2lwaWVudCwgaXMgcHJvaGliaXRlZC4gSWYNCj4geW91IGhh dmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5Lg0KDQpUaGlzIGVtYWlsIGlzIGludGVuZGVkIG9ubHkgZm9yIHRoZSBwZXJz b24gb3IgZW50aXR5IHRvIHdoaWNoIGl0IGlzIGFkZHJlc3NlZCBhbmQgbWF5IGNvbnRhaW4gaW5m b3JtYXRpb24gdGhhdCBpcyBwcml2aWxlZ2VkLCBjb25maWRlbnRpYWwgb3Igb3RoZXJ3aXNlIHBy b3RlY3RlZCBmcm9tIGRpc2Nsb3N1cmUuIERpc3NlbWluYXRpb24sIGRpc3RyaWJ1dGlvbiwgb3Ig Y29weWluZyBvZiB0aGlzIGVtYWlsIG9yIHRoZSBpbmZvcm1hdGlvbiBoZXJlaW4gYnkgYW55b25l IG90aGVyIHRoYW4gdGhlIGludGVuZGVkIHJlY2lwaWVudCwgb3IgYW4gZW1wbG95ZWUgb3IgYWdl bnQgcmVzcG9uc2libGUgZm9yIGRlbGl2ZXJpbmcgdGhlIG1lc3NhZ2UgdG8gdGhlIGludGVuZGVk IHJlY2lwaWVudCwgaXMgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFp bCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5Lg0K