From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH 1/1] gnu: libtiff: Fix CVE-2016-9297. Date: Wed, 16 Nov 2016 14:13:53 -0500 Message-ID: <20161116191353.GB5161@jasmine> References: <5e1ece4368188c766c670e0c0be7f881b683f470.1479237439.git.leo@famulari.name> <87bmxfe1rw.fsf@openmailbox.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="MfFXiAuoTsnnDAfZ" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42108) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c75ef-0000tp-8H for guix-devel@gnu.org; Wed, 16 Nov 2016 14:14:02 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c75ec-0001Mg-Tn for guix-devel@gnu.org; Wed, 16 Nov 2016 14:13:57 -0500 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:44165) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1c75ec-0001ML-Pb for guix-devel@gnu.org; Wed, 16 Nov 2016 14:13:54 -0500 Content-Disposition: inline In-Reply-To: <87bmxfe1rw.fsf@openmailbox.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Kei Kebreau Cc: guix-devel@gnu.org --MfFXiAuoTsnnDAfZ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 16, 2016 at 01:08:03PM -0500, Kei Kebreau wrote: > Leo Famulari writes: >=20 > > * gnu/packages/patches/libtiff-CVE-2016-9297.patch: New file. > > * gnu/local.mk (dist_patch_DATA): Add it. > > * gnu/packages/image.scm (libtiff/fixed)[source]: Use it. > LGTM. Thanks for the review! --MfFXiAuoTsnnDAfZ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYLK/xAAoJECZG+jC6yn8I3DAP/RUKtnyaXToaossfN76dwh/o p7Dsjz5HBdlaHCeU2gLoapZy8EW8ALIwPcdkTl3HKda/8xV1+fGxulApLZpMJPPt BMK3JoG4k5l5CVHRIU9LyobE6qj6qhyGguvt0sRrNnnXzKPxlwz4L88DcXHRry1M F3XEcYytrFltk0Blidn4GKAsq2c/XXF2ILabQog/QOpJ42mvfg17NmXKC5Rr62Of bMIMR+DA175p3yr12fuiIWkqpSU+lpA47RmBqMOt/fjZb2R6Zb1bogGYJblYCz4q lYh5MCjK/OtFK1Cx1o3Gy2/4ClgKs/TJrou+hBX52e1jbANZUkI8b5rGNuR5JkgR Aq/3lN6RfAOE66OSNUhD/GeDia0Rcf3+LSP+4Maveajtlk+vrGrUi+uudAB6jkkl eC3q8MEj7QZfF5l6rA5g7QI39N4FFJ/ANe6p985uDOKOaOfUhPPF/a8WduZWt5ID tTtSW2XY4HUbGXfWnXExGnycebj5ojtv83mym5YJGe47eDaHVUf/xpVN28AavWDU mV8OpwHIdGEaL8SeHjr/LGYBotAyRVMc3ofNBQ11PZHEXh2enQfQjw3ZJuzuPcq7 qqYFEXem60Uzmk9ewhMcm9EBQy/DccaXSl5nb2XUqZP3I8g+pT0IsSPSDwYK/VS+ /yhbB14Po97MMX8ZHF8I =fDaT -----END PGP SIGNATURE----- --MfFXiAuoTsnnDAfZ--