From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:36810)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fXYIL-0007ae-QI
	for guix-patches@gnu.org; Mon, 25 Jun 2018 16:41:06 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fXYII-0002Fv-Mm
	for guix-patches@gnu.org; Mon, 25 Jun 2018 16:41:05 -0400
Received: from debbugs.gnu.org ([208.118.235.43]:55655)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1fXYII-0002F8-I5
	for guix-patches@gnu.org; Mon, 25 Jun 2018 16:41:02 -0400
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fXYII-0006z0-8z
	for guix-patches@gnu.org; Mon, 25 Jun 2018 16:41:02 -0400
Subject: [bug#31967] [PATCH] gnu: libtiff: Fix CVE-2018-{8905,10963}.
Resent-Message-ID: <handler.31967.B31967.152995921926780@debbugs.gnu.org>
From: Marius Bakke <mbakke@fastmail.com>
In-Reply-To: <d75ef54861996dea82b053deec1f5eb5f5ab98e1.1529958742.git.leo@famulari.name>
References: <d75ef54861996dea82b053deec1f5eb5f5ab98e1.1529958742.git.leo@famulari.name>
Date: Mon, 25 Jun 2018 22:40:11 +0200
Message-ID: <87y3f2d2hg.fsf@fastmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha512; protocol="application/pgp-signature"
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-patches/>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org
Sender: "Guix-patches" <guix-patches-bounces+kyle=kyleam.com@gnu.org>
To: Leo Famulari <leo@famulari.name>, 31967@debbugs.gnu.org

--=-=-=
Content-Type: text/plain

Leo Famulari <leo@famulari.name> writes:

> * gnu/packages/patches/libtiff-CVE-2018-8905.patch,
> gnu/packages/patches/libtiff-CVE-2018-10963.patch: New files.
> * gnu/local.mk (dist_patch_DATA): Add them.
> * gnu/packages/image.scm (libtiff)[replacement]: New field.
> (libtiff/fixed): New variable.

LGTM, thanks!

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlsxUysACgkQoqBt8qM6
VPo92Qf/T8VBUqo9kJGqOLu4r+oI43BgPWnshXNkrer7FamwKOCdJ+3YEdg3GudY
syK7LDYGuj089Uw8CHh1H0O2FR58V+zm3iGGJaLZMzyT1bKBv0//ZyEnwtquyXWN
no2he3E9rvCpJRAuZDh5cPpmT1X90xXf9FG48nqbBi374Z1Q6olPFlCnCy/fdFGd
bLDrDE+XTqBe6Nl2oI4IYGS77DWD459Lua+qxozial3/dhBZ8PN8uK497cAfHMfc
YkpZQm7ebSsFV+Ncu/2T1cgMzqOE+Y34SLPB0hyKRmnUPPTmqpGC24ZJrXXlqo89
N/m7IpJwZOc64G6yHQ7RwbDL7c1XCA==
=TnDt
-----END PGP SIGNATURE-----
--=-=-=--