From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:37150) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fXqIA-00064t-4B for guix-patches@gnu.org; Tue, 26 Jun 2018 11:54:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fXqI6-0002Ry-U4 for guix-patches@gnu.org; Tue, 26 Jun 2018 11:54:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:56771) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fXqI6-0002Rl-LW for guix-patches@gnu.org; Tue, 26 Jun 2018 11:54:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fXqI6-0004LY-Dw for guix-patches@gnu.org; Tue, 26 Jun 2018 11:54:02 -0400 Subject: bug#31967: [PATCH] gnu: libtiff: Fix CVE-2018-{8905,10963}. Resent-To: guix-patches@gnu.org Resent-Message-ID: Date: Tue, 26 Jun 2018 11:52:59 -0400 From: Leo Famulari Message-ID: <20180626155259.GA6429@jasmine.lan> References: <87y3f2d2hg.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="82I3+IH0IqGh5yIs" Content-Disposition: inline In-Reply-To: <87y3f2d2hg.fsf@fastmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Marius Bakke Cc: 31967-done@debbugs.gnu.org --82I3+IH0IqGh5yIs Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jun 25, 2018 at 10:40:11PM +0200, Marius Bakke wrote: > Leo Famulari writes: >=20 > > * gnu/packages/patches/libtiff-CVE-2018-8905.patch, > > gnu/packages/patches/libtiff-CVE-2018-10963.patch: New files. > > * gnu/local.mk (dist_patch_DATA): Add them. > > * gnu/packages/image.scm (libtiff)[replacement]: New field. > > (libtiff/fixed): New variable. >=20 > LGTM, thanks! Thanks! Pushed as 8dbfaff028d73cc847a9fff03cb17006c5461b11 --82I3+IH0IqGh5yIs Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlsyYVsACgkQJkb6MLrK fwjRoRAAuOL3BjHo6IBsjotVP8jbMk4gChLW5tDnzXIHrlHY/Hyfout/hSiCm7ZP hDQBYa+XnXA32U4zxVBFGYxcAhp016GK/7hFcyAzJT1OntBjEpUa2sQE48sYZEx0 RfEWobN718MMg4pGvowXTBotoM7n2mvxJzgyhQetzK+0BLswdlUzAevOlIhn0naZ z+MrRvjug9NZa/duOxNhZe9cXoz7owjcdnJc3duPjhExkUjMwCnmIf8npoXoZlAH axKn89jxAju78dcUoPLF1xrEA0psW0WDmRRP5BLFPnB0n6MmzT8TpN4z8l421Nwg I/0Jiv+o4syjqN91hcmkVMrckJRGt1xyk4NQCb9YUlEMCo28o7dWvvE3SaQOPrvq mwS06nI/hkBWzkL7IuIXuN46Hn2rfEm8NU/y8G5dA0moUZ9nkxAQI5f1HHUbZgTt wyMqBFPm6aaLc0T0NvPFNZXzzNQJ8coBmI4jx8MrdwFzJHD3Wsf35VD7HluYAaVr 8uClcFbM0bdhnKf+yZfn55/0AYnvECcE+QluwHyPdMKm5nAlEmyNGi+71KHFVel+ xXL2M6zst6ShDBL3RAxljGAAW3IMqtFOCw15gtwKhMz2bWs6R6PCl4TxYiJypeZa SFEL18kXD54+rpjz41uhgJmQx8PYMRZcafY4hQk8yuqh/ovqaxk= =42mQ -----END PGP SIGNATURE----- --82I3+IH0IqGh5yIs--