Re: libtiff security update (multiple CVEs)

[David Craven]

LGTM. I didn't look at the patches, but adding a libtiff/fixed package
and using the replacement field in libtiff is my understanding of how
security updates should be done.