From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: [PATCH] gnu: mupdf: Fix CVE-2016-8674. Date: Wed, 26 Oct 2016 15:17:27 +0100 Message-ID: <87oa27chzc.fsf@duckhunt.i-did-not-set--mail-host-address--so-tickle-me> References: <87twc0s73r.fsf@openmailbox.org> <20161025171235.GA4569@jasmine> <87lgxbanmm.fsf@netris.org> <874m3z7osh.fsf@openmailbox.org> <87y41bd4ha.fsf@duckhunt.i-did-not-set--mail-host-address--so-tickle-me> <87shrjs2hz.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37776) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bzP1L-0004RI-9k for guix-devel@gnu.org; Wed, 26 Oct 2016 10:17:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bzP1G-00078E-JM for guix-devel@gnu.org; Wed, 26 Oct 2016 10:17:35 -0400 In-Reply-To: <87shrjs2hz.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s writes: >> From c51f44edf3293aae323eded49dcba750f54607cb Mon Sep 17 00:00:00 2001 >> From: Marius Bakke >> Date: Wed, 26 Oct 2016 06:39:34 +0100 >> Subject: [PATCH] gnu: mupdf: Modify CVE-2016-8674 patch to apply to 1.9a. >> >> The fix from upstream did not apply cleanly due to many context changes. >> This was adapted by cloning mupdf 1.9a from git and fixing conflicts >> after applying our patches and cherry-picking upstream commit 1e03c06. >> >> * gnu/packages/patches/mupdf-CVE-2016-8674.patch: Adapt to 1.9a. > > I=E2=80=99m in favor of you pushing this patch. > > We can always adjust later if need be, but it=E2=80=99s better than keepi= ng > mupdf broken. Okay. I applied this as 39df253e2bb260e67d8ce81431a9aa3478689774 with a reference to the original commit. Testing encouraged! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJYELr3AAoJEKKgbfKjOlT6z9cIAI8ssnjB5wqXRj1V1tViXYut DkNxCk/b3XRk350QIusJ/6Xv0iMmm1Qlz6xCMhlDBTU8u9P8utSwsj189r5I/iRg qDormyctCdmzznQ2d/O4PfpKaacbkUjRQv+7FogjVQuUJgIiT+cXWSF5nNlThINH piBUMshc0HHheHZR2a2bPFUn3xccz/ZBkJvmt1WCwQxzRTqXDuninPR3vlwC9ymX MqnYNF6HW7gm8evylm/+QXvhw9tU7f1HL1UcqjrKdtIw9VMkYe52r3MFE7KT3Yv0 iXv+sTJmIQWP2t7w5+WqKzMj1tzKcEdFkqQLAjwhZGa+fixgz4Ulpx2+G0BVfVY= =j2HE -----END PGP SIGNATURE----- --=-=-=--