all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].
@ 2017-05-27 15:35 Leo Famulari
  2017-05-27 15:38 ` Leo Famulari
  2017-05-28 20:12 ` Ludovic Courtès
  0 siblings, 2 replies; 5+ messages in thread
From: Leo Famulari @ 2017-05-27 15:35 UTC (permalink / raw)
  To: 27102

See 'ChangeLog' in the source distribution for more information about
the bugs and security issues fixed in this release.

* gnu/packages/image.scm (libtiff)[replacement]: Replace with libtiff-4.0.8.
(libtiff/fixed): Replace with ...
(libtiff-4.0.8): New variable.
---
 gnu/packages/image.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm
index 86902d568..2a13404d6 100644
--- a/gnu/packages/image.scm
+++ b/gnu/packages/image.scm
@@ -335,7 +335,7 @@ extracting icontainer icon files.")
 (define-public libtiff
   (package
    (name "libtiff")
-   (replacement libtiff/fixed)
+   (replacement libtiff-4.0.8)
    (version "4.0.7")
    (source (origin
             (method url-fetch)
@@ -384,18 +384,18 @@ collection of tools for doing simple manipulations of TIFF images.")
                                   "See COPYRIGHT in the distribution."))
    (home-page "http://www.simplesystems.org/libtiff/")))
 
-(define libtiff/fixed
+(define libtiff-4.0.8
   (package
     (inherit libtiff)
+    (version "4.0.8")
     (source
      (origin
-       (inherit (package-source libtiff))
-       (patches
-        (append
-         (origin-patches (package-source libtiff))
-         (search-patches "libtiff-CVE-2017-7593.patch"
-                         "libtiff-CVE-2017-7594.patch"
-                         "libtiff-multiple-UBSAN-crashes.patch")))))))
+       (method url-fetch)
+       (uri (string-append "ftp://download.osgeo.org/libtiff/tiff-"
+                           version ".tar.gz"))
+       (sha256
+        (base32
+         "0419mh6kkhz5fkyl77gv0in8x4d2jpdpfs147y8mj86rrjlabmsr"))))))
 
 (define-public libwmf
   (package
-- 
2.13.0

^ permalink raw reply related	[flat|nested] 5+ messages in thread

* bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].
  2017-05-27 15:35 bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes] Leo Famulari
@ 2017-05-27 15:38 ` Leo Famulari
  2017-05-28 15:45   ` Marius Bakke
  2017-05-28 20:12 ` Ludovic Courtès
  1 sibling, 1 reply; 5+ messages in thread
From: Leo Famulari @ 2017-05-27 15:38 UTC (permalink / raw)
  To: 27102

[-- Attachment #1: Type: text/plain, Size: 86 bytes --]

I forgot to remove the obsolete patches here. I've made that change in
my local tree.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].
  2017-05-27 15:38 ` Leo Famulari
@ 2017-05-28 15:45   ` Marius Bakke
  2017-05-28 18:35     ` Leo Famulari
  0 siblings, 1 reply; 5+ messages in thread
From: Marius Bakke @ 2017-05-28 15:45 UTC (permalink / raw)
  To: Leo Famulari, 27102

[-- Attachment #1: Type: text/plain, Size: 139 bytes --]

Leo Famulari <leo@famulari.name> writes:

> I forgot to remove the obsolete patches here. I've made that change in
> my local tree.

LGTM.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].
  2017-05-28 15:45   ` Marius Bakke
@ 2017-05-28 18:35     ` Leo Famulari
  0 siblings, 0 replies; 5+ messages in thread
From: Leo Famulari @ 2017-05-28 18:35 UTC (permalink / raw)
  To: Marius Bakke; +Cc: 27102-done

[-- Attachment #1: Type: text/plain, Size: 301 bytes --]

On Sun, May 28, 2017 at 05:45:52PM +0200, Marius Bakke wrote:
> Leo Famulari <leo@famulari.name> writes:
> 
> > I forgot to remove the obsolete patches here. I've made that change in
> > my local tree.
> 
> LGTM.

Thanks for the review!

Pushed as 22e6656d259838ae9014c1ed876caa9d819be6df.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes].
  2017-05-27 15:35 bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes] Leo Famulari
  2017-05-27 15:38 ` Leo Famulari
@ 2017-05-28 20:12 ` Ludovic Courtès
  1 sibling, 0 replies; 5+ messages in thread
From: Ludovic Courtès @ 2017-05-28 20:12 UTC (permalink / raw)
  To: Leo Famulari; +Cc: 27102

Hi Leo!

Leo Famulari <leo@famulari.name> skribis:

> See 'ChangeLog' in the source distribution for more information about
> the bugs and security issues fixed in this release.
>
> * gnu/packages/image.scm (libtiff)[replacement]: Replace with libtiff-4.0.8.
> (libtiff/fixed): Replace with ...
> (libtiff-4.0.8): New variable.

LGTM, thanks for taking care of this!

Ludo’.

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2017-05-28 20:13 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-05-27 15:35 bug#27102: [PATCH] gnu: libtiff: Update replacement to 4.0.8 [security fixes] Leo Famulari
2017-05-27 15:38 ` Leo Famulari
2017-05-28 15:45   ` Marius Bakke
2017-05-28 18:35     ` Leo Famulari
2017-05-28 20:12 ` Ludovic Courtès

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.