Re: libtiff security update (multiple CVEs)

2016-08-29 Thread Leo Famulari
On Thu, Aug 25, 2016 at 06:29:19PM +0200, David Craven wrote: > LGTM. I didn't look at the patches, but adding a libtiff/fixed package > and using the replacement field in libtiff is my understanding of how > security updates should be done. Thanks! Pushed as ed5940b617, along with another fix fo

Re: libtiff security update (multiple CVEs)

2016-08-25 Thread David Craven
LGTM. I didn't look at the patches, but adding a libtiff/fixed package and using the replacement field in libtiff is my understanding of how security updates should be done.

Re: libtiff security update (multiple CVEs)

2016-08-25 Thread Leo Famulari
On Tue, Aug 23, 2016 at 03:44:34PM -0400, Leo Famulari wrote: > I took these patches from the libtiff CVS repo using the information > contained in the respective bug reports: > http://bugzilla.maptools.org/buglist.cgi?product=libtiff > > This is my first time using CVS, so please review carefully

libtiff security update (multiple CVEs)

2016-08-23 Thread Leo Famulari
I took these patches from the libtiff CVS repo using the information contained in the respective bug reports: http://bugzilla.maptools.org/buglist.cgi?product=libtiff This is my first time using CVS, so please review carefully. I removed the hunks that looked like this, since most of them did not