Return-Path: <tiff-bounces@lists.maptools.org>
Delivered-To: info@awaresystems.be
Received: (qmail 30851 invoked from network); 1 Sep 2008 21:39:45 -0000
Received: from chuck.telenet-ops.be ([195.130.136.1])
          (envelope-sender <tiff-bounces@lists.maptools.org>)
          by angelia.telenet-ops.be (qmail-ldap-1.03) with SMTP
          for <info@awaresystems.be>; 1 Sep 2008 21:39:45 -0000
Received: from vijay.telenet-ops.be (vijay.telenet-ops.be [195.130.136.9])
	by chuck.telenet-ops.be (8.13.1/8.13.1) with ESMTP id m81Ldj7M024819
	for <info@awaresystems.be>; Mon, 1 Sep 2008 23:39:45 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by vijay.telenet-ops.be (Postfix) with SMTP id 2F8E260004
	for <info@awaresystems.be>; Mon,  1 Sep 2008 23:39:45 +0200 (CEST)
Received: from ladon.telenet-ops.be (ladon.telenet-ops.be [195.130.132.50])
	by vijay.telenet-ops.be (Postfix) with ESMTP id 27B9560003
	for <info@awaresystems.be>; Mon,  1 Sep 2008 23:39:45 +0200 (CEST)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153])
	by ladon.telenet-ops.be (Postfix) with ESMTP id B90F9312762
	for <info@awaresystems.be>; Mon,  1 Sep 2008 23:39:44 +0200 (CEST)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81LYEDs021730;
	Mon, 1 Sep 2008 17:35:48 -0400
Received: from sasl.smtp.pobox.com (a-sasl-quonix.sasl.smtp.pobox.com
	[208.72.237.25])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81LYAlb021724
	for <tiff@lists.maptools.org>; Mon, 1 Sep 2008 17:34:10 -0400
Received: from localhost.localdomain (localhost [127.0.0.1])
	by a-sasl-quonix.sasl.smtp.pobox.com (Postfix) with ESMTP id 15F946EE2F;
	Mon,  1 Sep 2008 17:34:09 -0400 (EDT)
Received: from [192.168.2.4] (dpc674728121.direcpc.com [67.47.28.121]) (using
	TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client
	certificate
	requested) by a-sasl-quonix.sasl.smtp.pobox.com (Postfix) with ESMTPSA
	id 811CC6EE2C; Mon,  1 Sep 2008 17:33:59 -0400 (EDT)
Message-ID: <48BC5FBE.2020907@pobox.com>
Date: Mon, 01 Sep 2008 17:33:50 -0400
From: Frank Warmerdam <warmerdam@pobox.com>
User-Agent: Thunderbird 2.0.0.6 (X11/20071022)
MIME-Version: 1.0
To: Lee Howard <faxguy@howardsilvan.com>
Subject: Re: [Tiff] Some security fixes from RHEL
References: <200808300053.35585.even.rouault@mines-paris.org>
	<48BAB60F.7040207@pobox.com>
	<Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
	<48BB143F.4020301@howardsilvan.com> <48BB5DBB.4010108@pobox.com>
	<48BC0FBB.6060407@howardsilvan.com>
In-Reply-To: <48BC0FBB.6060407@howardsilvan.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Pobox-Relay-ID: B5F9202A-786D-11DD-B109-3113EBD4C077-06493634!a-sasl-quonix.pobox.com
Cc: tiff@lists.maptools.org
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-SpamCatcher-Score: 50 [XX]

Lee Howard wrote:
> I am willing to volunteer to:
> 
> * Commit applicable downstream patches (i.e. security patches in 
> RedHat's build).
> 
> * Commit applicable patches that appear on this mailing list, on 
> bugzilla, or come to me in a more private manner.
> 
> * Monitor bug reports (esp. bugzilla) in an effort to encourage the 
> reporter to provide enough information such that the problematic code 
> can be pinpointed or such that a patch is provided.
> 
> * Perform test builds and run the test suite (I assume that libtiff has 
> one now?) after every commit to make sure that the commit did not break 
> anything - and if it did then to either fix the problem myself, return 
> to the patch developer for a fix, or to back out the patch.

Lee,

Welcome aboard!  (cvs commit info provided privately).

> What I would require in return is:
> 
> * Regular and frequent releases.  (And what I mean by that is 
> approximately once per month whenever there has been any non-trivial 
> amount of code changes committed.)  If this cannot be done due to other 
> maintainer time constraints, then I am willing to assist in the releases 
> to whatever degree is necessary.

I'm keen on putting out some additional 3.9.0 and 4.0.0 betas on a fairly
regular basis.

Would you like to review and apply the CVE-2008-2327 patches in 3.9
branch and cvs head (aka 4.0.0) as a first task?  I'm not convinced this
has been filed in Bugzilla yet, so you may have to do that yourself.

Best regards,
-- 
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up   | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush    | Geospatial Programmer for Rent

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
