Re: Libtiff CVE-2016-5652

2016-10-30 Thread Leo Famulari
VE-2016-5652. > > > > * gnu/packages/patches/libtiff-CVE-2016-5652.patch: New file. > > * gnu/local.mk (dist_patch_DATA): Add it. > > * gnu/packages/image.scm (libtiff/fixed)[source]: Use it. > > I’d say go for it. Pushed to master and merged into core-updates.

Re: Libtiff CVE-2016-5652

2016-10-30 Thread Ludovic Courtès
> Date: Sat, 29 Oct 2016 19:23:05 -0400 > Subject: [PATCH] gnu: libtiff: Fix CVE-2016-5652. > > * gnu/packages/patches/libtiff-CVE-2016-5652.patch: New file. > * gnu/local.mk (dist_patch_DATA): Add it. > * gnu/packages/image.scm (libtiff/fixed)[source]: Use it. I’d say go for it. 0 days since the last image library vulnerability… Thank you! Ludo’.

Libtiff CVE-2016-5652

2016-10-29 Thread Leo Famulari
VE-2016-5314 [0]. [0] http://bugzilla.maptools.org/show_bug.cgi?id=2554 From 7abe86a8d93e1a1ed11f14ec7ede22ce9b020611 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Sat, 29 Oct 2016 19:23:05 -0400 Subject: [PATCH] gnu: libtiff: Fix CVE-2016-5652. * gnu/packages/patches/libtiff-CVE-2016-5652.