Bug 876921 – Vote on GLEP 68 update to 1.3

• Product: Gentoo Council
• Status: RESOLVED FIXED

[Description Michał Górny 2022-10-13 05:14:50 UTC]

Please vote on the most recent patchset to GLEP 68 (the metadata.xml GLEP).  The changes are currently blocking me from requesting media type registration for these files, as they affect "security considerations" for the format.

They're:

- specifying that metadata.xml files are XML 1.0 and linking to the standard
- forbidding "external markup declarations" and DTD use, to prevent network fetching and entity-based attacks
- clarifying that metadata.xml files must not use non-standard elements but readers must accept and ignore them (for future extension)

Proposed motion:

"""
Approved GLEP 68 changes as sent to the ml thread:
https://archives.gentoo.org/gentoo-dev/message/8e90fc6d45c18500506acfbb0ca7032a
"""

[Comment 1 Matt Turner 2022-10-13 16:35:10 UTC]

I vote yes.

[Comment 2 John Helmert III 2022-10-13 17:52:41 UTC]

I vote yes

[Comment 3 Ulrich Müller 2022-10-14 03:50:37 UTC]

/me votes yes

[Comment 4 Georgy Yakovlev 2022-10-14 13:31:40 UTC]

Vote yes

[Comment 5 Michał Górny 2022-10-14 15:33:12 UTC]

I vote yes.

[Comment 6 Andreas K. Hüttel 2022-11-13 19:37:01 UTC]

yes

[Comment 7 Sam James 2022-11-13 19:37:53 UTC]

I vote yes.

[Comment 8 Ulrich Müller 2022-11-13 20:28:44 UTC]

Accepted unanimously.

https://gitweb.gentoo.org/data/glep.git/commit/?id=75261f97e6ea138d53f4b38834082ba4a10e0183
Author: Michał Górny <[e-mail]>
Date:   Fri Oct 7 22:22:22 2022 +0200

    glep-0068: Clarify and restrict XML data format
    
    Explicitly specify XML 1.0 and link to the specification.  Forbid
    "external markup declarations" and processing DTDs to secure against
    common XML attacks.
    
    Signed-off-by: Michał Górny <[e-mail]>

https://gitweb.gentoo.org/data/glep.git/commit/?id=5330e6efbdf16a1aef8b257201359f224484f235
Author: Michał Górny <[e-mail]>
Date:   Fri Oct 7 22:24:52 2022 +0200

    glep-0068: Indicate that unknown elements should be ignored
    
    As originally stated, the GLEP did not permit extending the format.
    Let's relax the requirement to conforming files but indicate that
    the parsers should ignore unknown (i.e. future) elements.
    
    Signed-off-by: Michał Górny <[e-mail]>