diff options
author | Leo Famulari <leo@famulari.name> | 2018-06-25 16:28:00 -0400 |
---|---|---|
committer | Leo Famulari <leo@famulari.name> | 2018-06-26 11:49:07 -0400 |
commit | 8dbfaff028d73cc847a9fff03cb17006c5461b11 (patch) | |
tree | 0c72436cb2e10e8359d0093507a5ba1007be6ef6 /gnu/packages/image.scm | |
parent | 671dd8d6e6088055d31315315e3bdd1c4fa90a0f (diff) | |
download | patches-8dbfaff028d73cc847a9fff03cb17006c5461b11.tar patches-8dbfaff028d73cc847a9fff03cb17006c5461b11.tar.gz |
gnu: libtiff: Fix CVE-2018-{8905,10963}.
* gnu/packages/patches/libtiff-CVE-2018-8905.patch,
gnu/packages/patches/libtiff-CVE-2018-10963.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/image.scm (libtiff)[replacement]: New field.
(libtiff/fixed): New variable.
Diffstat (limited to 'gnu/packages/image.scm')
-rw-r--r-- | gnu/packages/image.scm | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index a2874be1a8..5ad6fe9487 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -394,6 +394,7 @@ extracting icontainer icon files.") (define-public libtiff (package (name "libtiff") + (replacement libtiff/fixed) (version "4.0.9") (source (origin @@ -426,6 +427,17 @@ collection of tools for doing simple manipulations of TIFF images.") "See COPYRIGHT in the distribution.")) (home-page "http://www.simplesystems.org/libtiff/"))) +(define libtiff/fixed + (package + (inherit libtiff) + (source + (origin + (inherit (package-source libtiff)) + (patches + (append (origin-patches (package-source libtiff)) + (search-patches "libtiff-CVE-2018-8905.patch" + "libtiff-CVE-2018-10963.patch"))))))) + (define-public leptonica (package (name "leptonica") |