Return-Path: <tiff-bounces@remotesensing.org>
Received: from xserve.flids.com (adsl-065-083-169-202.sip.mco.bellsouth.net [65.83.169.202])
        by inmx009.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-2.32) with ESMTP id j537HXV7022176
        for <joris.at.lebbeke@skynet.be>; Fri, 3 Jun 2005 09:17:34 +0200
        (envelope-from <tiff-bounces@remotesensing.org>)
Received: from adsl-065-083-169-202.sip.mco.bellsouth.net (localhost [127.0.0.1])
	by xserve.flids.com (Postfix) with ESMTP
	id F15E425D5DEF; Fri,  3 Jun 2005 03:17:16 -0400 (EDT)
X-Original-To: tiff@remotesensing.org
Delivered-To: tiff@remotesensing.org
Received: from tuschin.blackcatnetworks.co.uk (tuschin.blackcatnetworks.co.uk
	[193.201.200.34])
	by xserve.flids.com (Postfix) with ESMTP id EB45725D5DC8
	for <tiff@remotesensing.org>; Fri,  3 Jun 2005 03:17:14 -0400 (EDT)
Received: from grmarkham.plus.com ([80.229.30.161] helo=[192.168.1.100])
	by tuschin.blackcatnetworks.co.uk with asmtp (Exim 3.35 #1 (Debian))
	id 1De6Qc-0006mD-00
	for <tiff@remotesensing.org>; Fri, 03 Jun 2005 08:17:14 +0100
Message-ID: <42A003FA.6040709@gerv.net>
Date: Fri, 03 Jun 2005 08:17:14 +0100
From: Gervase Markham <gerv@gerv.net>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: tiff@remotesensing.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [Tiff] BitsPerSample buffer overflow - security release?
X-BeenThere: tiff@remotesensing.org
X-Mailman-Version: 2.1.2
Precedence: list
List-Id: TIFF and libtiff discussion  <tiff.remotesensing.org>
List-Unsubscribe: <http://xserve.flids.com/mailman/listinfo/tiff>,
	<mailto:tiff-request@remotesensing.org?subject=unsubscribe>
List-Archive: <http://xserve.flids.com/pipermail/tiff>
List-Post: <mailto:tiff@remotesensing.org>
List-Help: <mailto:tiff-request@remotesensing.org?subject=help>
List-Subscribe: <http://xserve.flids.com/mailman/listinfo/tiff>,
	<mailto:tiff-request@remotesensing.org?subject=subscribe>
Sender: tiff-bounces@remotesensing.org
Errors-To: tiff-bounces@remotesensing.org
X-UIDL: 000000000023ceae.00000329
X-MSP-STORE: Fri, 03 Jun 2005 09:17:43 +0200
Status:   

[Resending from correct address now I'm subscribed.]

Hi,

Is there a planned release date for a stable version of libTIFF with a 
fix for the BitsPerSample stack-based buffer overflow[0]?

You guys fixed the problem in CVS early last month[1].

Gentoo[2] and Ubuntu[3] have already issued updated packages. We use a 
binary version of libTIFF embedded in FreeImage[4], and so can't easily 
patch our local copy, so ideally you guys would release an update and 
then we'd get them to release one as well. Do you have a planned release 
date for the next version?

Thanks for your time,

Gerv

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1544
[1] http://bugzilla.remotesensing.org/show_bug.cgi?id=843
[2] http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml
[3] http://www.ubuntulinux.org/support/documentation/usn/usn-130-1
[4] http://freeimage.sourceforge.net/
_______________________________________________
Tiff mailing list: Tiff@remotesensing.org
http://xserve.flids.com/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
