bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

[Leo Famulari]

See 'ChangeLog' in the source distribution for more information about
the bugs and security issues fixed in this release.

* gnu/packages/image.scm (libtiff)[replacement]: Replace with libtiff-4.0.8.
(libtiff/fixed): Replace with ...
(libtiff-4.0.8): New variable.
---
 gnu/packages/image.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm
index 86902d568..2a13404d6 100644
--- a/gnu/packages/image.scm
+++ b/gnu/packages/image.scm
@@ -335,7 +335,7 @@ extracting icontainer icon files.")
 (define-public libtiff
   (package
    (name "libtiff")
-   (replacement libtiff/fixed)
+   (replacement libtiff-4.0.8)
    (version "4.0.7")
    (source (origin
             (method url-fetch)
@@ -384,18 +384,18 @@ collection of tools for doing simple manipulations of TIFF images.")
                                   "See COPYRIGHT in the distribution."))
    (home-page "http://www.simplesystems.org/libtiff/")))
 
-(define libtiff/fixed
+(define libtiff-4.0.8
   (package
     (inherit libtiff)
+    (version "4.0.8")
     (source
      (origin
-       (inherit (package-source libtiff))
-       (patches
-        (append
-         (origin-patches (package-source libtiff))
-         (search-patches "libtiff-CVE-2017-7593.patch"
-                         "libtiff-CVE-2017-7594.patch"
-                         "libtiff-multiple-UBSAN-crashes.patch")))))))
+       (method url-fetch)
+       (uri (string-append "ftp://download.osgeo.org/libtiff/tiff-"
+                           version ".tar.gz"))
+       (sha256
+        (base32
+         "0419mh6kkhz5fkyl77gv0in8x4d2jpdpfs147y8mj86rrjlabmsr"))))))
 
 (define-public libwmf
   (package
-- 
2.13.0

bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 86 bytes --]

I forgot to remove the obsolete patches here. I've made that change in
my local tree.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 139 bytes --]

Leo Famulari <leo@famulari.name> writes:

> I forgot to remove the obsolete patches here. I've made that change in
> my local tree.

LGTM.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 301 bytes --]

On Sun, May 28, 2017 at 05:45:52PM +0200, Marius Bakke wrote:
> Leo Famulari <leo@famulari.name> writes:
> 
> > I forgot to remove the obsolete patches here. I've made that change in
> > my local tree.
> 
> LGTM.

Thanks for the review!

Pushed as 22e6656d259838ae9014c1ed876caa9d819be6df.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].

[Ludovic Courtès]

Hi Leo!

Leo Famulari <leo@famulari.name> skribis:

> See 'ChangeLog' in the source distribution for more information about
> the bugs and security issues fixed in this release.
>
> * gnu/packages/image.scm (libtiff)[replacement]: Replace with libtiff-4.0.8.
> (libtiff/fixed): Replace with ...
> (libtiff-4.0.8): New variable.

LGTM, thanks for taking care of this!

Ludo’.