From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:49459) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ekip7-0001Y3-3b for guix-patches@gnu.org; Sat, 10 Feb 2018 23:01:05 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ekip4-00047o-CU for guix-patches@gnu.org; Sat, 10 Feb 2018 23:01:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:57871) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ekip4-00047j-7U for guix-patches@gnu.org; Sat, 10 Feb 2018 23:01:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ekip3-0006ze-W8 for guix-patches@gnu.org; Sat, 10 Feb 2018 23:01:02 -0500 Subject: bug#30418: [PATCH] gnu: libtiff: Fix CVE-2017-{9935,11335,18013}. Resent-To: guix-patches@gnu.org Resent-Message-ID: Date: Sat, 10 Feb 2018 23:00:02 -0500 From: Leo Famulari Message-ID: <20180211040002.GB6331@jasmine.lan> References: <3B1F7BD8-9EAA-4560-A547-3D308C01BF09@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="TRYliJ5NKNqkz5bu" Content-Disposition: inline In-Reply-To: <3B1F7BD8-9EAA-4560-A547-3D308C01BF09@fastmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Marius Bakke Cc: 30418-done@debbugs.gnu.org --TRYliJ5NKNqkz5bu Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Feb 11, 2018 at 02:32:38AM +0100, Marius Bakke wrote: >=20 >=20 > On February 11, 2018 2:05:18 AM GMT+01:00, Leo Famulari wrote: > >* gnu/packages/patches/libtiff-CVE-2017-9935.patch, > >gnu/packages/patches/libtiff-CVE-2017-11335.patch, > >gnu/packages/patches/libtiff-CVE-2017-18013.patch: New files. > >* gnu/local.mk (dist_patch_DATA): Add them. > >* gnu/packages/image.scm (libtiff)[replacement]: New field. > >(libtiff/fixed): New variable. >=20 > LGTM, thanks for taking care of this. Thanks for review, pushed as 79cf1053046f083df831460c9ff7d42d5c47c110 --TRYliJ5NKNqkz5bu Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlp/v8IACgkQJkb6MLrK fwjIeg//RZQZg/3EtDPu2YiSN5iEBA1X5eijwROGZHjqq00lAfYwAmGyCGUwz8yv Zz7lSE1lUYUSylklZED5BkfX6ABdj0hBg1FP5hRex+aEWASIeWDOadk1/OIKCeE0 wistyZg/ClUqQjH2UH5HStm2G4HyqqaNdfbhdAfWjN+umAb3DFXEDXJEF+cUr/uf aLBsqCBoeiKJ4ksOoGSn5D0U8ML2ftAXoqXQPzePUDjmOeyQjhFaDhlFzZ2UX2la hcrm4TNpNBZszb/6JWvVIL/E381/KcD+WDwcQmW87OAiN0T3+MDka/xJS7yYewAC qL1nmEeMP8FULyiC8PJ2VFy3+f+bG+7HjmnGtaD8BZRH+uXjO7MFDrEyAM4bWlA2 4ZiK0hfXtiCeTawyUxX4Hf3+GyXip6oVE/bRV25n1wyaFn48jei9nqr0XCX6mGPQ nxdfEJaVH6w6WcXviq7KxYVCGcRAGgVecBSyKmsCTf+nh0AlXQ3cAVfjPTViRIbY XbOuloqhF4sqF5l7aGprnIrmA3rwC/wyjArSWIJVrilyTbLEkvjb+yWlRw6+sqzk 1G8B9x6rc91pdBRdN6kUjwjG3lp8hdmIq8TrSjPz04LDbr1vlOIMGkRA4yFCqTDw XeFBUzhDzZnSt1JRR3kCMpRKOhBMmMyePDa6NTPpjeuzRXrOUN0= =OOH0 -----END PGP SIGNATURE----- --TRYliJ5NKNqkz5bu--