»
I fished out an upstream commit to graphics/gd to address CVE-2018-1000222. While there, I also restored the option to make linking with libtiff optional.