gnu: jasper: Add fixes for several security flaws.
* gnu/packages/patches/jasper-CVE-2007-2721.patch,
gnu/packages/patches/jasper-CVE-2008-3520.patch,
gnu/packages/patches/jasper-CVE-2011-4516-and-CVE-2011-4517.patch,
gnu/packages/patches/jasper-CVE-2014-8137.patch,
gnu/packages/patches/jasper-CVE-2014-8138.patch,
gnu/packages/patches/jasper-CVE-2014-8157.patch,
gnu/packages/patches/jasper-CVE-2014-8158.patch,
gnu/packages/patches/jasper-CVE-2014-9029.patch,
gnu/packages/patches/jasper-CVE-2016-1867.patch: New files.
* gnu-system.am (dist_patch_DATA): Add them.
* gnu/packages/image.scm (jasper)[source]: Add patches.
Merge branch 'core-updates'
gnu: libtiff: Update to 4.0.6. Add fixes for CVE-2015-{8665,8683}.
* gnu/packages/patches/libtiff-CVE-2015-8665+CVE-2015-8683.patch,
gnu/packages/patches/libtiff-oob-accesses-in-decode.patch,
gnu/packages/patches/libtiff-oob-write-in-nextdecode.patch: New files.
* gnu-system.am (dist_patch_DATA): Add them.
* gnu/packages/image.scm (libtiff): Update to 4.0.6.
[source]: Add patches.
Merge branch 'master' into core-updates
gnu: libpng: Update to 1.5.26 [fixes CVE-2015-8472 and CVE-2015-8540].
* gnu/packages/image.scm (libpng): Update to 1.5.26.
Merge branch 'master' into core-updates
gnu: jasper: Patch CVE-2008-3522.
* gnu/packages/patches/jasper-CVE-2008-3522.patch: New file.
* gnu/packages/image.scm (jasper)[source]: Use it.
* gnu-system.am (dist_patch_DATA): Add it.
gnu: Add jasper.
* gnu/packages/image.scm (jasper): New variable.
gnu: libpng: Update to 1.5.24 [fixes CVE-2015-8126].
* gnu/packages/image.scm (libpng): Update to 1.5.24.
gnu: Add devil.
* gnu/packages/image.scm (devil): New variable.
* gnu/packages/patches/devil-fix-libpng.patch: New file.
* gnu-system.am (dist_patch_DATA): Add it.
gnu: images: Add jpegoptim 1.4.3
* gnu/packages/images.scm (jpegoptim): New variable jpegoptim
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: libpng: Use 1.5.24 as a replacement [fixes CVE-2015-8126].
Reported by Leo Famulari <leo@famulari.name>.
* gnu/packages/image.scm (libpng-urls): New procedure.
(libpng)[source]: Use it.
[replacement]: New field.
(libpng-1.5.24): New variable.
Merge branch 'dbus-update'
gnu: leptonica: Disable parallel tests.
* gnu/packages/image.scm (leptonica)[arguments]: Add #:parallel-tests?.
gnu: leptonica: Disable failing tests.
* gnu/packages/image.scm (leptonica)[arguments]: Add 'disable-failing-tests' phase.
gnu: leptonica: Update to 1.72.
* gnu/packages/image.scm (leptonica): Update to 1.72.
gnu: giflib: Update to 5.1.1.
* gnu/packages/image.scm (giflib): Update to 5.1.1.
gnu: giflib: Update to 5.1.1.
* gnu/packages/image.scm (giflib): Update to 5.1.1.