From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH 1/1] gnu: mupdf: Fix CVE-2016-{7504, 7505, 7506, 7563, 7564, 9017, 9136} in bundled mujs. Date: Tue, 8 Nov 2016 11:05:35 -0500 Message-ID: <20161108160535.GC19400@jasmine> References: <996e97f9777a1c92668af69973b82acf3b12b0ff.1478581593.git.leo@famulari.name> <8760ny8asn.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="AhhlLboLdkugWU4S" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60940) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c48u7-0002my-7h for guix-devel@gnu.org; Tue, 08 Nov 2016 11:05:44 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c48u1-00035H-LK for guix-devel@gnu.org; Tue, 08 Nov 2016 11:05:43 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:54743) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1c48u1-00034b-I5 for guix-devel@gnu.org; Tue, 08 Nov 2016 11:05:37 -0500 Content-Disposition: inline In-Reply-To: <8760ny8asn.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Marius Bakke Cc: guix-devel@gnu.org --AhhlLboLdkugWU4S Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Nov 08, 2016 at 11:34:48AM +0000, Marius Bakke wrote: > Leo Famulari writes: >=20 > > * gnu/packages/patches/mupdf-CVE-2016-7504.patch, > > gnu/packages/patches/mupdf-CVE-2016-7505.patch > > gnu/packages/patches/mupdf-CVE-2016-7506.patch > > gnu/packages/patches/mupdf-CVE-2016-7563.patch > > gnu/packages/patches/mupdf-CVE-2016-7564.patch > > gnu/packages/patches/mupdf-CVE-2016-9017.patch > > gnu/packages/patches/mupdf-CVE-2016-9136.patch: New files. > > * gnu/local.mk (dist_patch_DATA): Add them. > > * gnu/packages/pdf.scm (mupdf)[source]: Use them. >=20 > LGTM, thanks for staying on top of this! Thanks for the review! Pushed as 667e777b4e4b7303b6f30a001fe2539b7207b65b --AhhlLboLdkugWU4S Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYIffPAAoJECZG+jC6yn8IZxAQAIEo//nTH13sZ2kCMvp0CGPE yfaYc6d9IGXaYonaD3LGZMY9fZjqtcBYLbn5S+RFS8b1+S/ph9g++3+7PZIQ3AWL 7e7vDMnV8E1C+YrWaC7vFVW73POjTy4YVNiNsVOvGGwgtXfIJYUy8mqYa96f+M34 greDL8zLbJrfOMznNNVnGRGW/1a7CCdq43e6+zN1GqBXcx7JQAqzOfNllSe+HnoQ 6ibTsqjBbF3ByYTWPqqoFRBhdZyemo5YVj058B9yOvxDBFso05r+uond15833anj s4K8JdF7QejWKhO7Ur00CK6uj0kny8MZ8n0kLqdPeN+J5oEeButrZ10/WzclA+cn u0nAW21c9oNcbhZheHq3Rc44aJNo1H0aJ19zIx5l0cTQFcoXm4xN6+AmKp6+Y7qr HurBmsfPBtp57bgr+dbtbwpKTVP/CKhuUlkjpk6lkwwnwXPO8anO/nHZCT7eGEE8 mTBJRQX2wXocmazxrviznj20p11qUdIpZDZ02eHkai00sHVZsLDBm91xIx2n6ud5 uejx5GbHi5Lf1kwyICRoCMeTViYVvHNRKPiFaTe0Px4O3Nf60EXAxhj5wnwRzPqd or0bgLkMd1L91Ya2BGbOnHyXF7zEqa83NjhrcE9rHbrH5dMnocVt9y15NBPD9TNF 7KT8EOe5c836yCMMo/2Y =Bdm7 -----END PGP SIGNATURE----- --AhhlLboLdkugWU4S--