Re: v2: OpenJPEG security fixes (CVE-2016-{5157,7163})

[Leo Famulari <leo@famulari.name>]

On Sat, Sep 10, 2016 at 12:34:39AM +0200, Ludovic Courtès wrote:
> > Please see attached. These patches should be applied on top of the
> > patches in the email that I am replying to.
> 
> The patches in question LGTM.
> 
> > From a357edf0f568acf937f2cd9f0e97269221aee3f2 Mon Sep 17 00:00:00 2001
> > From: Leo Famulari <leo@famulari.name>
> > Date: Fri, 9 Sep 2016 16:08:02 -0400
> > Subject: [PATCH 1/2] gnu: mupdf: Update to 1.9a.
> >
> > * gnu/packages/pdf.scm (mupdf): Update to 1.9a.
> > [source]: Use "mupdf-build-with-openjpeg-2.1.patch". Adjust snippet to
> > preserve bundled 'thirdparty/mujs'.
> > [inputs]: Add harfbuzz. Replace openjpeg-2.0 with openjpeg.
> > * gnu/packages/patches/mupdf-build-with-openjpeg-2.1.patch: New file.
> > * gnu/local.mk (dist_patch_DATA): Add it.
> 
> [...]
> 
> > From 8c201fd0392bee804bf11f7c07f4817e3766becd Mon Sep 17 00:00:00 2001
> > From: Leo Famulari <leo@famulari.name>
> > Date: Fri, 9 Sep 2016 16:24:12 -0400
> > Subject: [PATCH 2/2] gnu: Remove openjpeg-2.0.
> >
> > * gnu/packages/image.scm (openjpeg-2.0): Remove variable.
> 
> OK as well.

Pushed to 2884c63cbc4b5254d767436a145c03a7480c9755. Thanks for the
reviews!