guix.git/gnu/packages/patches/optipng-CVE-2017-1000229.patch, branch master

guix.git/gnu/packages/patches/optipng-CVE-2017-1000229.patch, branch master Personal branch of https://git.savannah.gnu.org/cgit/guix.git/ for implementing 'guix deploy'. https://git.jakob.space/guix.git/atom?h=master 2018-02-23T15:00:04Z gnu: optipng: Update to 0.7.7 [security fixes]. 2018-02-23T15:00:04Z Tobias Geerinckx-Rice 2018-02-23T13:24:42Z urn:sha1:bbf8832f160120d4f78b563653db49ab715e7c6c This release claims to fix 2 vulnerabilities: - ‘an integer overflow vulnerability in the TIFF decoder’ (CVE-2017-1000229, previously patched in Guix), and - ‘a buffer overflow vulnerability in the GIF decoder’. * gnu/packages/image.scm (optipng): Update to 0.7.7. [source]: Remove patch. [arguments]: Substitute INVOKE for SYSTEM* and end phase with #t. * gnu/packages/patches/optipng-CVE-2017-1000229.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. gnu: optipng: Fix CVE-2017-1000229. 2017-11-29T11:53:08Z Marius Bakke 2017-11-28T16:41:33Z urn:sha1:0e7fb0cd9b91e873b5f9d04c49472b06aff6911f * gnu/packages/image.scm (optipng)[source](patches): New field. * gnu/packages/patches/optipng-CVE-2017-1000229.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it.