branch master updated: gnu: libtiff: Update to 4.2.0 [security fixes].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

lle_bout pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new 6320700  gnu: libtiff: Update to 4.2.0 [security fixes].
6320700 is described below

commit 6320700b114f09c09fbe613e2032abe077d28583
Author: Léo Le Bouter <lle-bout@zaclys.net>
AuthorDate: Wed Mar 10 00:45:48 2021 +0100

    gnu: libtiff: Update to 4.2.0 [security fixes].
    
    Non-exhaustively, fixes CVE-2020-35523, CVE-2020-35522 and CVE-2020-35521.
    
    * gnu/packages/image.scm (libtiff/fixed): New variable.
    (libtiff)[replacement]: Graft.
---
 gnu/packages/image.scm | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm
index a68ff66..94d5e4d 100644
--- a/gnu/packages/image.scm
+++ b/gnu/packages/image.scm
@@ -590,6 +590,7 @@ extracting icontainer icon files.")
        (sha256
         (base32
          "0d46bdvxdiv59lxnb0xz9ywm8arsr6xsapi5s6y6vnys2wjz6aax"))))
+   (replacement libtiff/fixed)
    (build-system gnu-build-system)
    (outputs '("out"
               "doc"))                           ;1.3 MiB of HTML documentation
@@ -612,6 +613,19 @@ collection of tools for doing simple manipulations of TIFF 
images.")
                                   "See COPYRIGHT in the distribution."))
    (home-page "http://www.simplesystems.org/libtiff/";)))
 
+(define-public libtiff/fixed
+  (package
+    (inherit libtiff)
+    (version "4.2.0")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://download.osgeo.org/libtiff/tiff-";
+                           version ".tar.gz"))
+       (sha256
+        (base32
+         "1jrkjv0xya9radddn8idxvs2gqzp3l2b1s8knlizmn7ad3jq817b"))))))
+
 (define-public leptonica
   (package
     (name "leptonica")