all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* [PATCH 0/2] OpenJPEG security fixes (CVE-2016-{5157,7163})
@ 2016-09-09  6:04 Leo Famulari
  2016-09-09  6:04 ` [PATCH 1/2] gnu: openjpeg-2.*: Fix CVE-2016-7163 Leo Famulari
                   ` (3 more replies)
  0 siblings, 4 replies; 12+ messages in thread
From: Leo Famulari @ 2016-09-09  6:04 UTC (permalink / raw)
  To: guix-devel

Two bugs disclosed in OpenJPEG, CVE-2016-5157 and CVE-2016-7163. Both
can be used to execute arbitrary code, apparently.

CVE-2016-7163:
http://seclists.org/oss-sec/2016/q3/442

CVE-2016-5157:
http://seclists.org/oss-sec/2016/q3/441

Leo Famulari (2):
  gnu: openjpeg-2.*: Fix CVE-2016-7163.
  gnu: openjpeg-2.*: Fix CVE-2016-5157.

 gnu/local.mk                                      |  2 +
 gnu/packages/image.scm                            |  8 +-
 gnu/packages/patches/openjpeg-CVE-2016-5157.patch | 98 +++++++++++++++++++++++
 gnu/packages/patches/openjpeg-CVE-2016-7163.patch | 71 ++++++++++++++++
 4 files changed, 177 insertions(+), 2 deletions(-)
 create mode 100644 gnu/packages/patches/openjpeg-CVE-2016-5157.patch
 create mode 100644 gnu/packages/patches/openjpeg-CVE-2016-7163.patch

-- 
2.10.0

^ permalink raw reply	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2016-09-10  1:05 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-09-09  6:04 [PATCH 0/2] OpenJPEG security fixes (CVE-2016-{5157,7163}) Leo Famulari
2016-09-09  6:04 ` [PATCH 1/2] gnu: openjpeg-2.*: Fix CVE-2016-7163 Leo Famulari
2016-09-09  7:15   ` Efraim Flashner
2016-09-09  7:59     ` Leo Famulari
2016-09-09 22:29       ` Ludovic Courtès
2016-09-09  6:04 ` [PATCH 2/2] gnu: openjpeg-2.*: Fix CVE-2016-5157 Leo Famulari
2016-09-09  8:09   ` Leo Famulari
2016-09-09  7:16 ` [PATCH 0/2] OpenJPEG security fixes (CVE-2016-{5157,7163}) Efraim Flashner
2016-09-09 18:04 ` v2: " Leo Famulari
2016-09-09 20:26   ` Leo Famulari
2016-09-09 22:34     ` Ludovic Courtès
2016-09-10  1:05       ` Leo Famulari

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.