GNU bug report logs - #27370
[PATCH] gnu: libtiff: Fix several bugs related to improper codec usage [security fixes].

Previous Next

Full log

Message #8 received at 27370 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Leo Famulari <leo <at> famulari.name>
Cc: 27370 <at> debbugs.gnu.org
Subject: Re: [bug#27370] [PATCH] gnu: libtiff: Fix several bugs related to
 improper codec usage [security fixes].
Date: Thu, 15 Jun 2017 10:13:43 +0200

Leo Famulari <leo <at> famulari.name> skribis:

> Fixes CVE-2014-8128, CVE-2015-7554, CVE-2016-5318, CVE-2016-10095, and
> the other bugs listed in 'libtiff-tiffgetfield-bugs.patch'.
>
> * gnu/packages/patches/libtiff-tiffgetfield-bugs.patch: New file.
> * gnu/local.mk (dist_patch_DATA): Add it.
> * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use it.

LGTM.  ‘guix lint -c cve’ will keep complaining, but I guess splitting
the patch in one patch per CVE might be hard and not worth the effort.
Thoughts?

Could you apply them to ‘core-updates’ as well?

Thank you!

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.