Fix CVE-2017-9936:

http://bugzilla.maptools.org/show_bug.cgi?id=2706
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9936
https://security-tracker.debian.org/tracker/CVE-2017-9936

Patch lifted from upstream source repository (the changes to 'ChangeLog'
don't apply to the libtiff 4.0.8 release tarball).

3rd party Git reference:

https://github.com/vadz/libtiff/commit/fe8d7165956b88df4837034a9161dc5fd20cf67a

2017-06-26  Even Rouault <even.rouault at spatialys.com>

        * libtiff/tif_jbig.c: fix memory leak in error code path of
JBIGDecode()
        Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
        Reported by team OWL337

/cvs/maptools/cvsroot/libtiff/ChangeLog,v  <--  ChangeLog
new revision: 1.1254; previous revision: 1.1253
/cvs/maptools/cvsroot/libtiff/libtiff/tif_jbig.c,v  <--  libtiff/tif_jbig.c
new revision: 1.16; previous revision: 1.15

Index: libtiff/libtiff/tif_jbig.c
===================================================================
RCS file: /cvs/maptools/cvsroot/libtiff/libtiff/tif_jbig.c,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- libtiff/libtiff/tif_jbig.c	10 Mar 2010 18:56:48 -0000	1.15
+++ libtiff/libtiff/tif_jbig.c	26 Jun 2017 15:20:00 -0000	1.16
@@ -1,4 +1,4 @@
-/* $Id: tif_jbig.c,v 1.15 2010-03-10 18:56:48 bfriesen Exp $ */
+/* $Id: tif_jbig.c,v 1.16 2017-06-26 15:20:00 erouault Exp $ */
 
 /*
  * Copyright (c) 1988-1997 Sam Leffler
@@ -94,6 +94,7 @@
 			     jbg_strerror(decodeStatus)
 #endif
 			     );
+		jbg_dec_free(&decoder);
 		return 0;
 	}
 
<form class='right' method='get' action='/guix/log/gnu/packages/parallel.scm'>
<input type='hidden' name='id' value='43412ab967ee00789fe933f916d804aed9961c57'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=43412ab967ee00789fe933f916d804aed9961c57'>root</a>/<a href='/guix/log/gnu?id=43412ab967ee00789fe933f916d804aed9961c57'>gnu</a>/<a href='/guix/log/gnu/packages?id=43412ab967ee00789fe933f916d804aed9961c57'>packages</a>/<a href='/guix/log/gnu/packages/parallel.scm?id=43412ab967ee00789fe933f916d804aed9961c57'>parallel.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/parallel.scm?id=43412ab967ee00789fe933f916d804aed9961c57&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-08-23 22:35:38 +0200'>2019-08-23</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=d9d1421a4fdc9ab3c99a6dc07af09c548e7d177c'>gnu: parallel: Update to 20190822.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-06-18 16:51:22 +0200'>2019-06-18</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=0c212811ac5cdfd6bcdfd4e7eb82571bbd6e33d5'>gnu: Add python-slurm-magic.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-05-23 22:07:48 +0200'>2019-05-23</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=e26d628b0fabf5a0aa7c4164a9558c66c61e02ab'>gnu: parallel: Update to 20190522.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-04-22 02:36:20 +0200'>2019-04-22</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=8dafe89593b810bcc7e46add88f3ce178a321bdd'>gnu: parallel: Update to 20190422.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-04-16 17:30:22 +0200'>2019-04-16</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=e31ece97517312e9b054767c18c6f38d8d5d8618'>gnu: slurm: Configure with a "standard" syslogdir.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-03-22 16:02:17 +0100'>2019-03-22</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=70d6a614243cb8222f33a583be632d62f58817d2'>gnu: parallel: Update to 20190322.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-02-24 17:51:29 +0100'>2019-02-24</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=545383fd0454bb70c4f23597d46584dbab2089cf'>gnu: parallel: Update to 20190222.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-02-12 02:33:55 +0100'>2019-02-12</span></td><td><a href='/guix/commit/gnu/packages/parallel.scm?id=d4c95a237ce4af1fc0278f8b2af2ebfb07e86275'>gnu: parallel: Update to 20190122.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>