From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kei Kebreau Subject: Re: [PATCH] gnu: gd: Fix CVE-2016-8670. Date: Sat, 15 Oct 2016 22:34:41 -0400 Message-ID: <87shrxauny.fsf@openmailbox.org> References: <87bmylcri9.fsf@openmailbox.org> <87bmyljmzb.fsf@duckhunt.i-did-not-set--mail-host-address--so-tickle-me> <20161015221631.GB6128@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43341) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bvbHt-0006qA-JG for guix-devel@gnu.org; Sat, 15 Oct 2016 22:34:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bvbHq-00013i-FE for guix-devel@gnu.org; Sat, 15 Oct 2016 22:34:57 -0400 Received: from smtp26.openmailbox.org ([62.4.1.60]:42806 helo=smtp11.openmailbox.org) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1bvbHq-00013J-9x for guix-devel@gnu.org; Sat, 15 Oct 2016 22:34:54 -0400 In-Reply-To: <20161015221631.GB6128@jasmine> (Leo Famulari's message of "Sat, 15 Oct 2016 18:16:31 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Leo Famulari writes: > On Sat, Oct 15, 2016 at 10:55:52PM +0100, Marius Bakke wrote: >> Kei Kebreau writes: >>=20 >> > This patch fixes the gd library's most recent published vulnerability = on >> > the oss-security list. >>=20 >> Looks like this was already applied by Leo in >> e1376e25a755a7368d095b4eb2daf42be9e63b0d. > > It's always good to see what somebody else would have done. I'm glad our > patches made the same change in this case :) I see. Sometimes my tree gets behind on changes. Good thing it was only a small patch! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYAudCAAoJEOal7jwZRnoNE3kP/25toogJkA516js7mWcwpo+A lPiRwHgu5CPsRzNDOVMbeiAhjuR7DC41rfxx3/atW7+AupKZ01+LIKzipoajB04f oCfDujBmRTYBho0bcm+dKJ3w1LFTXkLXWz8uXdxvjWMXU0uMLgRvbH/oass+STd4 9jFtGO+Jj5quu61eNBIzQKQnmMEQiRXpKBifnmey3F58nUcSgoQSLzppD+UT8QMM P4tmgwvRVTse+Qh3uRP/88no8SmUNfehi1YBfhdu0avWgMOU5gzrBBgQEH05beT1 N8XF4OocNvyzTwfolruSzK/SI4P4YH/Bj/GXWxUCr8DMslIGp0QO033/Xp4bMO7/ D374cMhwH0bjWuke8CJzG1PAYnbj1TYqGtDhIFbXfFruS53EL8qtn/z/VdXEbK03 ZGrpSaD430l0h6VNCtEQzZSzzZYjwBudY4/B52u99Y6Kn/OhwNxSC8MLbb6dYOVo SoKfYS3un7fF+D6Fwf/1SQ3R4awPxYkMXLItwLQe0OQpBdIL54F1XVvvCXud2cMf Ux3O9Yis/b2/8U8Af4I+R6nsa/5mkZkMGWbxMx6M6+3oT1/OyaFPlZz8OSI90d5d XXgmwd/pohm1l+UTBsEkfP1fB26MPTHVZTHLMIaLDvVtPPcNwopKEJTEi/r+387A ODC2hDG9zJ5XR2cHQzWh =sikb -----END PGP SIGNATURE----- --=-=-=--