From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: [PATCH] gnu: mupdf: Fix CVE-2016-8674. Date: Tue, 25 Oct 2016 21:46:09 -0400 Message-ID: <87lgxbanmm.fsf@netris.org> References: <87twc0s73r.fsf@openmailbox.org> <20161025171235.GA4569@jasmine> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57934) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bzDIe-0001dm-2q for guix-devel@gnu.org; Tue, 25 Oct 2016 21:46:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bzDIa-0008Kd-LG for guix-devel@gnu.org; Tue, 25 Oct 2016 21:46:40 -0400 Received: from world.peace.net ([50.252.239.5]:41517) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1bzDIa-0008Iz-HD for guix-devel@gnu.org; Tue, 25 Oct 2016 21:46:36 -0400 In-Reply-To: <20161025171235.GA4569@jasmine> (Leo Famulari's message of "Tue, 25 Oct 2016 13:12:35 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari writes: > On Tue, Oct 25, 2016 at 12:53:28PM -0400, Kei Kebreau wrote: >> Fix for https://blogs.gentoo.org/ago/2016/09/22/mupdf-use-after-free-in-pdf_to_num-pdf-object-c/. > >> From 97312c3c9e13688081aa513d1c94a9fff1274f75 Mon Sep 17 00:00:00 2001 >> From: Kei Kebreau >> Date: Tue, 25 Oct 2016 12:49:52 -0400 >> Subject: [PATCH] gnu: mupdf: Fix CVE-2016-8674. >> >> * gnu/packages/patches/mupdf-CVE-2016-8674.patch: New file. >> * gnu/local.mk (dist_patch_DATA): Add it. >> * gnu/packages/pdf.scm (mupdf): Use it. > > Thank you, please push! mupdf-CVE-2016-8674.patch fails to apply: https://hydra.gnu.org/build/1581228/nixlog/2/tail-reload Kei, did you test this? Mark