Return-Path: <SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org>
Received: from el10148.bc ([10.35.132.229]) by mailafep065-svc.mx.internal
          (InterMail vM.9.07.03.027 201-2473-138-3) with ESMTP
          id <20230919185724.MSWS16757.mailafep065-svc.mx.internal@el10148.bc>
          for <chris.lindelaan@skynet.be>; Tue, 19 Sep 2023 20:57:24 +0200
Received: from mailgate107.bc ([10.48.11.217])
 by el10148.bc with ngmta
 id 8a443736-178661cd4e5b98da; Tue, 19 Sep 2023 20:57:24 +0200
Authentication-Results: mx101.skynet.be; dkim=none (message not signed) header.i=none; spf=None smtp.pra=tiff-bounces@lists.osgeo.org; spf=Pass smtp.mailfrom=SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org; spf=PermError smtp.helo=postmaster@lists.osgeo.org
Received-SPF: None (mx101.skynet.be: no sender authenticity
  information available from domain of
  tiff-bounces@lists.osgeo.org) identity=pra;
  client-ip=140.211.15.3; receiver=mx101.skynet.be;
  envelope-from="SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="tiff-bounces@lists.osgeo.org";
  x-conformance=sidf_compatible
Received-SPF: Pass (mx101.skynet.be: domain of
  SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org
  designates 140.211.15.3 as permitted sender)
  identity=mailfrom; client-ip=140.211.15.3;
  receiver=mx101.skynet.be;
  envelope-from="SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-conformance=sidf_compatible; x-record-type="v=spf1";
  x-record-text="v=spf1 mx a:mail.osgeo.org a:lists.osgeo.org
  a:mail.osgeo.osuosl.org ip4:140.211.15.3 a:osgeo7.osgeo.org
  a:trac.osgeo.org a:dev.trac.osgeo.org a:osgeo8.osgeo.org
  a:secure.osgeo.osuosl.org ip4:140.211.15.57
  ip4:140.211.15.32 ip4:140.211.15.26 ip4:140.211.15.6
  ip4:140.211.15.9 ip4:140.211.15.13 a:web.osgeo9.osgeo.org"
Received-SPF: PermError (mx101.skynet.be: cannot correctly
  interpret sender authenticity information from domain of
  postmaster@lists.osgeo.org) identity=helo;
  client-ip=140.211.15.3; receiver=mx101.skynet.be;
  envelope-from="SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="postmaster@lists.osgeo.org";
  x-conformance=sidf_compatible; x-record-type="v=spf1";
  x-record-text=""
X-Ironport-Dmarc-Check-Result: validskip
IronPort-SDR: 6509ef13_K9fv2noJVEEAokcTnlm18dLQ1dG9Hd+6k6Q5Wy19kIpyMlU
 OR+PdlhMzQUjSionxrU7R1EOq9GuPc+DPy/LvzA==
X-Proximus-RemoteIp: 140.211.15.3
X-Proximus-Mfrom: SRS0=VnuY=FD=lists.osgeo.org=tiff-bounces@osgeo.org
X-Proximus-Rcpto: chris.lindelaan@skynet.be
X-IPAS-Result: =?us-ascii?q?A0G+AQAw7gllmAMP04xagQmEBhkBX1csAgEITogihS2IY?=
 =?us-ascii?q?wMWi1aTTzMaAQECAQEBAQEJLgsJAgQBAQECAQOBTT+JeCEFAQQ0EwECBAEBA?=
 =?us-ascii?q?QEDAgMBAQEBAQEDAQEBBAEBAQIBAQIEAgIBAQIQAQEBAQEBAQEeGQUQDieFa?=
 =?us-ascii?q?A2CPAIDHwEGCyJqgR0BAQEBAQEBAQEBAQEBAQEBAQEBFwINeQECAwEBATcMC?=
 =?us-ascii?q?hwCCAYDAQIGAQEKGB4EBAgDASMBLwYTBQSCdQGCXgMFDAawTIE0gQGDGLAPg?=
 =?us-ascii?q?WiBSIgJAYoGQoFJRHobMwOCdT6CVwsBAQIBgiqFdgSJRoUBPAcyhR9fiiAqg?=
 =?us-ascii?q?QgIXoFqPQINVQsLXYERgkQCAhEnEhQFQnEbAwcDgQQQKwcELxsHBgkWGBQlB?=
 =?us-ascii?q?lEELSQJExI+BIFngVEKgQY/EQ4RgkUiAgc2NhlLgl0JFQw1ORV2ECsEFBiBE?=
 =?us-ascii?q?wRqHxUeNhESGQ0DCHYdAhEjPAMFAwQ2ChUNCyEFFEMDRwZMCwMCHAUDAwSBN?=
 =?us-ascii?q?gUPHgIQGgYOKQMDGVACEBQDPgMDBgMLOAMZKx1AAwttPRYfFBtIJ6E4A26DH?=
 =?us-ascii?q?SNCCA8BIjk2WR9BLaMSaJ8FgTaCZ4EujACNGYg5lxeSSJgtjWGVJYU/gXojP?=
 =?us-ascii?q?IEggQIDO4JnCUYcD44sFoNWhRSLAyQ0AjkCBwsBAQMJhUiDWSiCAAEB?=
IronPort-PHdr: A9a23:hv6FmxbL4Ki7D8MIsiPdBXH/LTHO34qcDmcuAnoPtbtCf+yZ8oj4O
 wSHvLMx1gGPBNWCoKMUw8Pt8InYEVQa5piAtH1QOLdtbDQizfssogo7HcSeAlf6JvO5JwYzH
 cBFSUM3tyrjaRsdF8nxfUDdrWOv5jAOBBr/KRB1JuPoEYLOksi7ze+/94PSbglSmTawYq5+I
 BqyoAjSq8IbnZZsJqEtxxXTv3BGYf5WxWRmJVKSmxbz+MK994N9/ipTpvws6ddOXb31cKokQ
 7NYCi8mM30u683wqRbDVwqP6WACXWgQjxFFHhLK7BD+Xpf2ryv6qu9w0zSUMMHqUbw5Xymp4
 rx1QxH0ligIKz858HnWisNuiqJbvAmhrAF7z4LNfY2ZKOZycqbbcNgHR2ROQ9xRWjRPDI28c
 YUADekPPehWoIbyulUOtRmzCwuxCO7h1jNGiWP50rMh0+k6DQHL3hYtE84SvHnOstn4MroZX
 +CvzKnPyDXOd+5b2TDm54PVch4hu/CMUqxrccXPz0kvFxnKjlWWqYf4OD6azeoNs3Ka7+V+T
 uKglWgnphpqojiuw8csko3JiZwPxl/Z7yp5xII1KsejSEJhfd6lH4FctzyBN4ZvRM4pXm5nt
 jogxLIcpZ67YDYFyI4hxxPHa/GKcoyF7wzgWeufLjl1mW9odr2+ihu9/katyu3yW8u13VpUo
 SRInNrBuHAM2hLd9MWKS+Zx81qj1DqTyQze5edJKl06m6rcLp4u2L8wlpwLvETMHy/2hEX2j
 LKNeUk+5ueo7OHnbq36qZ+bKY97lBv+MqUyms2/G+g3Lg8OX22D9eSn1b3j+FX5QLFUgf0tk
 qjZq4zaKtoepq6iGQNV1Zwj6xmnAzepytQXh2EHLFJEeB2blIjpPkvBIP/5DfijgFSgijBrx
 +rJPrH5BZXNNXfDn6nmfbpn7E5c0gUzwNZC7JxXErEMOO//V0DtuNDCEBM1LhG4z/z6BNh9z
 I8TV3qDD66ZPa/IsFKF5/gjL/eDaYIUojrwKfYo6vjzhnEjg1AdZ7Om3Z4PZXC4APtmJ0KZb
 GLogtcACmcKohE+QPbtiF2ZXj5ceXGyU7g75jEhB4KqFYbDRoazj7ydxCq3A5JbanxcBlySD
 Hvkap+IV+oMZS6ILMJtijkEWqKgS48l2xGurgj6y79/I+TJ5iMWqI7v2cB66O3ViBE99yR5A
 cST3WyVS2F0n3gIRyMt3Kxlpkx90ViD3rZ/g/BCEtxT/fxJXx8mNZ7dwex6Bcn+VRnGfteUT
 lapXsupASoqQ9I22N8ObFhyG9K4ghDExSqqDKcZl7qQC5Ms6KLTw2DxJ9phy3bBzKQtkkEqQ
 tFTOm2+mq5/6w/TCpbVnEWZjaaqdL8c0DTJ9GeCy2qBoV9XUApqXqrfW3ASfVDWrdf550PEU
 bCuFa4rPRBfxp3KF61Rd9e8jUlaXOyxf5PaYnmtgCG3HhmFwfWLdoWtfmwc2CDUDg8DixwS+
 nCdchQ/CCnynmTFETY7EFvuZ1/ro/V/pn3+VEIt0gyRc2Vl1qGp4VgSnvORTLUUxL1Tozorq
 Th/AAOg2cnLAcGLvQtrcfZhZ8gg6ndK3G7UrVl9IoC4NPIlwVofaBhs+UT12BhwTIJano8vp
 XIuyQN0bqWAzFJGcSjfwZH+NO7qLHLv9jCiYqLbwATb2deS5qBd9PU2pRD5sRi0G1E+23Fmy
 MVOlXyH6ZjNSg0IXsXqT0w1+hNm8qzceTQ3/IjO1HdhYpWz5wPD1dxhIOo+1l70Y9ZRPouAF
 RTuCIsdHMejL6otgVf/PTweO+UH3qk+d+28dvad1airNeZm1Gasg35G7Ztw1GqX9i9kTuOO0
 58Bx/iDmBeXESrn2gTy+vvrkJxJMGlBVlG0zjLpUcsIPvUalecjDHf3e5Tx3dZvgZPxHXRVp
 xavBFIDjcmufxfaL1nwxhZZ2klfp3u70TC5wDp5n3BhrqeW0CHUheW3ch0BNz0DX3Fs2HHrJ
 4X8lNUGRA6wdQF8iBqr6wPwwLVdr6lkB23SWltTOS/tIGxlFKyquenKeNZBvashqj4fS+Gge
 RafQ7/5rQEd1nbYJVAGkQ49agD/lLmsmx1hlHnbK218oX2fftt/kAve6tKZT/lM2DELXwF/k
 jbaAR67Jdb6tc6MmcL7v/q7eni7UYcbaiz31cWAuS+8sHVtGgG6luuvl8fPFQkhzTS90MJlW
 CKOqwzzCmXy/4K9N+8vPkx4XQelrdF5C4dzjs06icNY339SnZiT8Xcd2W7uLdVW377/Z3sRV
 Ftpi5bU5gbiwkhqMnOOwcrwSHycxsJrY9TybHkR32ox6MVDCaHc67Ih/2M9vlu2o0fbZuV7l
 ToG4f8v82IBxeYStwcqiCKHDfFaHEVVOzDtiwXd98q3/8A1LC6kdbm90lY7nMj0Ve3a5FsFA
 TCgJ9F5Tmdq485yMUzByij2+ti8IZ/LbsMVuwHSmRqT6oodYJ83iPcOgjJqfGznunhwgdUBt
 kQ745enjd2pBzBp/bmlGVhfLTL4YIUU4D64kadQkIOc2J2pFZh6MjIQU5bvC/WyH3hB0Javf
 xbLCzA6pnqBTPDDHAGRrU1hsnTEHouDM3CMOGJfys5tSR7bI1ZQylNxPn1yjtsyEQakw9bke
 UFy62UK51L2nRBLz/phKxj1Vmq3SB6AUj4vU9DfKQoPtlgE/ETEN8GCqOh+TWlU+ZiorQrFL
 WL+BUwANlsyAhm6AU3Sa5eCsN3B6PSDQO2lIPbJJ7KUprlCVvmGgJioz41t8i2kMd6AM34kC
 Oc0vygLFXx0AMXWnTwTRjdfzn6VKZTC/VHlp2ss5smkuOzmQgfu+ZeCB/NJPNNj9gr35MXLf
 ++ciSBlKCpJg5YFxHvG0r8ajxYZjyBjcSXoEKxV7HKVCviJw+kOUlhAOEYRfINS4qkx3xdAI
 5vemoqtj/hjje8zBksDX1Gy/6PhLcEMPWy5M0vKQUiRM7HTbwbx+JmiX6WheOh+oLBQtgaso
 nCcCEDuOXKEjTa8SxGhP6RGizydNxFFkIamfRtqT2/5Q5i1D3/zeM8yljAwzbAu0znxD1VEZ
 AZ6bnIYgJHF6SJDnu45HHdO430jKvOLzjqY4eedIJELt/BmGQxzjO1X5zI90bQfv0QmDLRl3
 SDVqNBpuVSvlOKCnyFmXBR5oTFOnIuXvE9mNPaR5txaVH3D5h5I8XSIBkFAuY5+EtO28fM1q
 JCHhOfpJTxF6d6R4cYMG52eNpecKHR4eR/5UDeGCQIESXisLm7SgApaiv7a/y+Rr4Mmsd7rg
 5UDTflcTlNQdLtSAxZgFd0GZpBsUT4j17mAkckT4Ty5thaZRd0G7MmbDrTIWKypcWvf1vFNN
 RwTzr7/csIULYL23AplcFYf/syCEhjMR9lG5Cp6YQIz5kJX/zB3HGE+xQT5cAqmpngIGvOz2
 BkshUN3M+M2+zrrsxEwPVXHo203ikZU+52tiGKKfTXsNqr2WppZBi2ysFMsNYj/BQFvYkWzh
 RA2bWucAegI1v05KCY212q+8dNOAaIOFPEcJkVJnLfOOrNzixxdsnn1nBMfo7GcUN07yU1wL
 9atty4Sgl47KoRsfOqJeewXqzoYzqOW4n3xirh3mlZHYR9QtjLaeTZU6hVUbv98fnPup7Eqs
 FfKkmlcdWJKUOElr/U7sEQmNOmHiSX63PQrxlmZD+GFKo6DoW/a3Y6NUgpojwUTlFhD8KQw2
 8pxO0GdUUYo0POaEA4TOMHeLRAwDYIa9X7PcDyWq+jRiYl4OYmwDKjhUPOOuaAIg0mlABdhH
 oIC6d4EF4Wt10eQI93gKfYJzhAk5QKjI1vgbrwBYBWQjDIOuN2y1rdz3JJBPXcaGmpwNmOw/
 LmW7g4mjfyfXcsnN3cXWoxXUxB+EMa+miNfozFBFGzujrpfklHbqWah4H+DRCPxZNdievqOM
 BZ8UYnvvy484q67lRjd/8a7RSmyONJ8t9vI8e5fqYyADqYedoNG6xLinZRpElKGBmrOCsKuY
 Z/rZIQrK9vuBSOmU1KxzjgyUsH6Mc2FKbOHjAauQpxb+tr+vnhrJYqmGzcSFg0l7fkE/755b
 BYfboATZR/zqx94MLewLQDe1c+hCTXIS3MeX7xUyuO0YKZSxiwnY7qhyXcueZo9yvG+7U8HQ
 JxZxgGb3/uoYJNSFDTiAnEIMRuavjI3ziIyU4R6ivd62h7DtkMQdiyGZPA8IiYsVzQUAVKJP
 W4wDXE3SljaipDMsFbEN1E6+ypGg80S1vZKvX+4uYXQMmzEsEODro7avi1masIp8fQZDA==
IronPort-Data: A9a23:jZtl3qlFHACLxfIoZUd3Q/ro5gxfL0RdPkR7XQ2eYbSJt1+Wr1Gzt
 xIaXGiCPP2Ma2byetlxb4jnpE8GuceExoRmHQZlrCgwQ3ga85WfXozIfx78ZXjCccSYFhtrs
 Z5ON9WRd5g+F3WH+k79Y7PshEcg6azZHbCU5Mwom8xSbVY6F3h+00s98wIdqtQ16TRsK1rV4
 bsem+WGZBn/nWQc3ls8s8qrsAlosOn5pAQWt1k/YeEjlFLFnhH5NrpGTU2KByW+GtM88tKSH
 b6Zl+nopzKBpH/BN/v8+lrFWh1VKlLtFVXW4pZmc/DKqgRPoCU0zpE6OJI0AauAo2zU9zzZ4
 IwlWa2YEW/FDIWV8Ague0Mw/xVFAEFz0OOvzU6X6JLMkBKcKiWEL8JGVynaNaVAkgp+7PonG
 fYwcFjhZTja7w66LS7SpkCBSa3PIeGyVL7ztE2MwhnSC8R5bJSEHpzg2oBRzXApvp9uB9fRM
 p9xhTpHNHwsYjVLO0wLE9Q5h+ilgT/4aTIwRFC9/PZvpTKKlUoojf62WDbWUoTiqcF9pXyj/
 jf4+XnIVz82Ydie0iaetHW3ieLI2yThV9cOFbO2s/RtnVuYy3c7DwYZWFz9puO24qK7c40Ce
 hZJpHV28cDe8mTzV9WkdCDlmEK9mRhFR4NiNO0LqzCSn/+8DwGxXTRUE28fNLTKrvQeTjww1
 0TPm9LvCTFrubSTYWme57GZsXW4NEAowXQqYjQLQAxbpd74r4w0yBXUU9F4FOiylNKd9SzML
 y6ipy4M2JgXypMy/Zrk9EGAmgrzhoLoQVtgjunIZV6N4gR8bY+jQoWn71nH8PpNRLp1qHHc5
 hDofODDsIgz4YGxeD+lHLlTQezyjxqRGHiF2wU2RMR5n9i40yf7JehtDCdCyFCF2yruURbta
 kbVqGu9D7cCYyDwNMebj29XYvnGIIDnDtvoUa6SacFBb583cxSa+zpqI0mK0AgBcXTAc4lgZ
 f93ku72VR727JiLKhLqHo/xNpd3mkgDKZv7H8yT8vhe+eP2iISpYbkEKkCSSesy8bmJpg7Ym
 /4GaZrXk0sGALajP3KOmWL2EbzsBSVhbXwRg5EKHtNv3iI/QQnN9teInu95K9QNc1p9zLiXl
 p1CZqOo4AGj1SCWd1nihoFLbr7zQpFlrjo1OjZkMFq10HE/YIGppK4Ze9MtcKIq/fZozbZ1S
 bECYciPBfInd9g002p1UHUJl6Q7LE7DrVvXZ0KNOWFvF7Y+HVCh0oG/JGPHqnJRZhdbQONj+
 dVMICuBH8paL+mjZe6LAM+SI6SZ5CVAxL4tABuZfLG+uizEqeBXFsA4tddvS+lkFPkJ7mDyO
 9++WEpH+bv+sMUu/cPXhKuJiY6sHqEsVgBZBmTXp/L+fyXT4mPpk8cKXfeqbALtcjr+2JyjQ
 uFJkND6EvkMx2hRv6RGTr1E8KMZ5vnUnYF88DhKJnv3QlCXNJ1eBUTf4+Jut7JMzIB3oQGZe
 FyC0fgENKSrOPHKKk8wJg0kZ8S5jfo0v2f2/KUuKXXcvCRmoaSMC0lWNQjRlidYJ6V/D609y
 8h4uMQXuhK0qiAyOIzbnAQPzXy+K00Bd44FtZgqJpDhpSR261NFYL3aUjTX5rPWYfpyE0AaG
 B2mr4ucuKZ52Wz5bGsVKXjB+cF/lKY+kklG43FaLmvYh+efoOE82SNg1AgeTyNX/01h6P1yM
 G06DH9FD/yC0BkwjfcSQl32PR9KASCY3UnDy1Epsmn9ZGvwX0zvKFwNA8q8zHo7wUl9IAcCp
 Kq5zVz7WwnEZMvyhys+eXB0oszZEOBeyFfwp9CFLe+kQb8KOSHok42/V1ou8hHHO/48tGfDh
 Ott/dtzV5HFCD4tk/U7JrSehJstS0GiBW1dQPte0rsDMkPCdRqThzWfCUCDVflcBv7N8H69O
 d1nGfxdZSvj/S3UqiwQKr4IB7pOnPQG9NoJa+6zKEVb6rCOjyFItajI/XPUn14bQNRJkOQWI
 NnweAiEMHSitV1QkWrNrMBrZmu2WsYFbwvCx9KI8P0FOpYAkeN0e2Qg++KQk1TPFTU/5DOSn
 gfIR5GO/txY0Y42wrfdSPRSNTu7OfbYdbqu8jnql/9scNmWE8PFlz1Nm2ndJw4MYIcgAYVmp
 4+s7uzy8ljO5ostcmbjnJKEKalFyOOyUMdTMeP1NHNqpjSDauC9/yo8/32EFrIRnON//sWHQ
 y6KWPm0f/MRWPZfwyRbUDgBMhA/D6+sULzsixngpNuxCz8c8zf9EvWZyVHTY112chM2FaPZN
 1bKkNev+dFSk6pUDjAmGfxNIsF1MX3ja4QcZvzzsjiSMUewiHO4pJzkrwIS7ADXAXy6AMrF3
 4DJazLlfSSU4KrZkc9S6YB2tAxKEn14iq4Rf10cyfFymTuVHG4LFsVDEJQkW7V/sD3+64H8X
 x7JNFAdMCTaWS9WVDnB+/HhY1uvPfMPMdLHOTAZxUOYRCOoDoemArE61CNfz1ppWznklseLF
 Mo//yDuAx2P3Z1Zf+Yfyfili+NBxPmB5HYp+1j4ovPiESQlHrQG+3xwLjVjDRWdPZn2q3zKA
 mwpSURvYkKxExfxGPk9XU9lIkgSuTe3wgg4aSuK/s3khLya6+9+mdnfIOD414MRYPsafIAuQ
 WzFfErTwmS09EFKh44XlYMHvatGB8iPPPCGF474ZAhLn6iP+mUtZMwDuiwUTfAdwg1UEnKDt
 z2K2EUsLRW7LR0I54HP5j8lool4YlRUBCCUkgWlqTvMgEEnxN3SKhSFyAfJKMjxofPdonQCf
 iUrQxeDkQeoqh/h9ChMp9UAh1m9GcpKP2L1YiMpaZLTkxmXV25WEo564Xw6z9589H5lxJ1eU
 aSsj+UG54OsWx2Q0zDenNs2ZqZtq5EDEF8hj4DF0Q1KFNzq8q/GaPe8d6iHSzgNjSFMWVgu1
 tPZb3rdA1n0tShTRjlUhN3Deadj67iX16MK13tnNJp04oSj65k4n4K0xSKMew4MDKWIatulX
 XXruP2+FU46HEHpZs1umW0Hy4X/+9w/0mj6h0DhCk2b6LjfxUFsXul269EF2++EcCRdHlkJs
 j3JfODKidH75ViAlV3+0HGug4kkTzSl4IAmZCfvPnbvJy84q5Rmq4aduKiHrRsuNL5xR7lJz
 ld3PnPC0+XZ+XgySRqwKzxKT2DsOB2PCJGyK/saSIiRpvr3C9xgffknhkl0SNYWwERQt85gF
 Dy4D4muxe1WIbdQXYqK7nC2fwAcE6LOKEmuvfe8pmJdLK38MoaM8ZfFENCTkobrEhyYw0b/j
 +QPjplcimP37MQwwHBb1CJuvp+Y8csN3FyhJAKOxg1ArgLOLMrOyUv3QsBJh7OhpCoszG0iw
 o60dlIb6YMfMezuJyX4NvWgnkiOEBzKeRqR0WCvIg8OeQTn6EQr8pPwba3t16PC9SaX09tL2
 EuQUNRBPrJGD1ImTkCUCjDDKTKKJFqHVDRe3vmijlNbB09hnVIb3GxDyY6jNIcChFpaOHZr/
 xBJDhr4JJRilO/1ykTv0BXv+L+1BXcxo8cWrJ69ByV3yyazNCEovPpPG56CLcEBop9+SNE4G
 BfUWgA2/mGcS+Y1Eqvw2jAG185knSOS6osbQIosVNKKsc3zFCWY5QlVCyu5TnJ5wUplzw==
IronPort-HdrOrdr: A9a23:SeXnGKx43mPuMyYhEd+5KrPw2b1zdoMgy1knxilNoHtuA7ylfq
 GV7YcmPHDP5wr5ZktQ6+xoVJPvfZqYz+8X3WE+VY3SIjUOklHYUb2L1OPZskLd88eXzJ8t6U
 4YSdkDNDSSNykcsS+Z2njbLz96+qj8zEnAv463pBoAcegpUdAE0+5XMHfvLqQcfng+OXNWLv
 qhD4Z81l6dkbV+VLXCOpGLMtKo1rv2fB2PW298OzcXrDjLtz+u5bLgeiL44isj
X-Talos-CUID: =?us-ascii?q?9a23=3AUu2C+GtJdkfhzhjQEBRrGcJa6IsudE+C4XOXfna?=
 =?us-ascii?q?SNjlgWfqMcQCw4oJrxp8=3D?=
X-Talos-MUID: =?us-ascii?q?9a23=3A1Nlkyg4ilhussykAlKrtpfQzxoww+qj3I31Qqak?=
 =?us-ascii?q?/nM/dKXVCHDeszwWoF9o=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-MGA-submission: =?us-ascii?q?MDFpqfJrtCxwlyQNjwRv/WQENB0bqNg1Pf48vQ?=
 =?us-ascii?q?xKT3i/daUQmIVNRA/j535tgR0/+3I0Qut1oNsq1V3nJOX7rwjTmVcLZN?=
 =?us-ascii?q?hxWWd2W2xTOXawAd8vMWyq/+I7G/T/LgHS/v4=3D?=
Received: from osgeo6.osgeo.osuosl.org (HELO lists.osgeo.org) ([140.211.15.3])
  by mx101.skynet.be with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Sep 2023 20:57:22 +0200
Received: from osgeo6.osgeo.osuosl.org (localhost [127.0.0.1])
	by lists.osgeo.org (Postfix) with ESMTP id 99105618F9D1;
	Tue, 19 Sep 2023 11:57:16 -0700 (PDT)
X-Greylist: delayed 352 seconds by postgrey-1.36 at osgeo6;
 Tue, 19 Sep 2023 11:57:14 PDT
Received: from smtp.simplesystems.org (smtp.simplesystems.org [65.66.246.90])
 by lists.osgeo.org (Postfix) with ESMTPS id 7A632612142B
 for <tiff@lists.osgeo.org>; Tue, 19 Sep 2023 11:57:14 -0700 (PDT)
Received: from scrappy.simplesystems.org (scrappy.simplesystems.org
 [65.66.246.73])
 by smtp.simplesystems.org (8.14.4+Sun/8.14.4) with ESMTP id 38JIpLw4006284
 for <tiff@lists.osgeo.org>; Tue, 19 Sep 2023 13:51:21 -0500 (CDT)
Date: Tue, 19 Sep 2023 13:51:21 -0500 (CDT)
From: Bob Friesenhahn <bfriesen@simple.dallas.tx.us>
X-X-Sender: bfriesen@scrappy.simplesystems.org
To: Tiff List <tiff@lists.osgeo.org>
In-Reply-To: <1cd60020-da0f-1aa1-edb7-1194bb74fec3@gmail.com>
Message-ID: <alpine.GSO.2.20.2309191327360.9503@scrappy.simplesystems.org>
References: <50468401-a16f-74f9-2f91-1fd07f745a18@howardsilvan.com>
 <rmibkdytaya.fsf@s1.lexort.com>
 <34fcf7af-43d7-8400-f4a5-521f41691afa@howardsilvan.com>
 <1cd60020-da0f-1aa1-edb7-1194bb74fec3@gmail.com>
User-Agent: Alpine 2.20 (GSO 67 2015-01-07)
MIME-Version: 1.0
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16
 (smtp.simplesystems.org [65.66.246.90]); Tue, 19 Sep 2023 13:51:21 -0500 (CDT)
Subject: Re: [Tiff] unsupported/archived tools and feature in v4.6.0
X-BeenThere: tiff@lists.osgeo.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.osgeo.org>
List-Unsubscribe: <https://lists.osgeo.org/mailman/options/tiff>,
 <mailto:tiff-request@lists.osgeo.org?subject=unsubscribe>
List-Post: <mailto:tiff@lists.osgeo.org>
List-Help: <mailto:tiff-request@lists.osgeo.org?subject=help>
List-Subscribe: <https://lists.osgeo.org/mailman/listinfo/tiff>,
 <mailto:tiff-request@lists.osgeo.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tiff-bounces@lists.osgeo.org
Sender: "Tiff" <tiff-bounces@lists.osgeo.org>
X-VadeSecure-Score: -100
X-VadeSecure-Verdict: clean
X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedviedrudekuddguddtudcutefuod
 etggdotefrodftvfcurfhrohhfihhlvgemucfrtffqigfkofgfufenuceurghilhhouhhtmecufed
 tudenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhepfffhvfgjkfhffgggufhp
 jefjudeftdfgtggvshesthejredttdervdenucfhrhhomhepuehosgcuhfhrihgvshgvnhhhrghhn
 hcuoegsfhhrihgvshgvnhesshhimhhplhgvrdgurghllhgrshdrthigrdhusheqnecuggftrfgrth
 htvghrnhepheeileevkeefgfeuuefgieeggfehhfejiedvgfefkefhieffveeiudeujedtvdegnec
 uffhomhgrihhnpehgihhthhhusgdrtghomhdptghovhgvrhhithihrdgtohhmpdhsihhmphhlvghs
 hihsthgvmhhsrdhorhhgpdhgrhgrphhhihgtshhmrghgihgtkhdrohhrghdpohhsghgvohdrohhrg
 henucfkphepudegtddrvdduuddrudehrdefpdeihedrieeirddvgeeirdejfeenucevlhhushhtvg
 hrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpedugedtrddvuddurdduhedrfedpmhgrihhlfhh
 rohhmpefutffutdepgghnuhgjpefhffeplhhishhtshdrohhsghgvohdrohhrghepthhifhhfqdgs
 ohhunhgtvghssehoshhgvghordhorhhgpdhnsggprhgtphhtthhopedupdhrtghpthhtoheptghhr
 hhishdrlhhinhguvghlrggrnhesshhkhihnvghtrdgsvgdpmhhouggvpehsmhhtphdpghgvthdqfg
 hrlhfknhhsihhghhht

On Tue, 19 Sep 2023, Steve Underwood wrote:
>
> I also rely on some of those utilities being in distributions. Is there a 
> concise list of the relevant CVEs? I would rather spend some time fixing 
> issues than see a valuable utility get dropped.

Rather than worrying about the existing CVEs, I recommend a thorough 
top/down, left/right, more holostic evaluation/analysis of each 
utility, resulting in re-working/re-writing the utility the way it 
should have been in the first place.  Perhaps even starting using the 
older code as a reference (before the utility code started being full 
of band-aid patches) is a good approach.

Other than tiffcrop (a very powerful utility), most of the utilities 
have little source code.  The utilities were written specifically for 
TIFF (and libtiff) in order to gain capabilities and efficiencies not 
readily possible for general-purpose software.

Without doing this, there will only be more CVEs.

The current active libtiff maintainers are not interested in taking on 
this work.  If it is done independently, then perhaps a new 
implementation could be submitted to libtiff, or the utilities could 
easily live in a different distribution/repository so they can respond 
to bugs and feature requests independently of libtiff release cycles.

The CVEs were getting way out of hand.  There were CVEs written 
because it was possible to crash the utility due to incorrect 
permutations of arguments, rather than due to the utility inputs.

A good way to make sure that code is working is to submit the project 
for oss-fuzz's fuzz testing (https://github.com/google/oss-fuzz). 
Oss-fuzz normally tests APIs but a means could be provided so that the
utilities can appear as an API for testing.  For example, fmemopen() 
can be inserted in place of fopen().

It is useful to take advantage of Synopsis Coverity free testing for 
open-source software (e.g. https://scan.coverity.com/projects/tiff) 
since it is good at ferreting out certain types of problems.

Bob
-- 
Bob Friesenhahn
bfriesen@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt
_______________________________________________
Tiff mailing list
Tiff@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/tiff
