Return-Path: <awaresystems.be+caf_=filtered=awaresystems.be@gmail.com>
Delivered-To: filtered@awaresystems.be
Received: from mx-r.one.com (mx-r.one.com [91.198.169.249])
	by mail6.b-one.net (Postfix) with ESMTP id D91E080103FBB
	for <filtered@awaresystems.be>; Tue, 19 Jun 2012 22:05:10 +0200 (CEST)
X-Virus-Scanned: by one.com
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "MIME-Version"
Received-SPF: pass (mx-r: domain of awaresystems.be+caf_=filtered=awaresystems.be@gmail.com designates 209.85.210.48 as permitted sender)
X-Greylist: whitelisted by SQLgrey-1.8.0-rc2
Received: from mail-pz0-f48.google.com (mail-pz0-f48.google.com [209.85.210.48])
	by mx-r.one.com (Postfix) with ESMTP id 28E551909159
	for <filtered@awaresystems.be>; Tue, 19 Jun 2012 20:05:09 +0000 (UTC)
Received: by dadz8 with SMTP id z8so9756363dad.21
        for <filtered@awaresystems.be>; Tue, 19 Jun 2012 13:05:09 -0700 (PDT)
Received: by 10.68.228.102 with SMTP id sh6mr65332714pbc.134.1340136308924;
        Tue, 19 Jun 2012 13:05:08 -0700 (PDT)
X-Forwarded-To: filtered@awaresystems.be
X-Forwarded-For: awaresystems.be@gmail.com filtered@awaresystems.be
Delivered-To: awaresystems.be@gmail.com
Received: by 10.143.92.14 with SMTP id u14csp183284wfl;
        Tue, 19 Jun 2012 13:05:06 -0700 (PDT)
Received: by 10.68.217.234 with SMTP id pb10mr67976504pbc.79.1340136304889;
        Tue, 19 Jun 2012 13:05:04 -0700 (PDT)
Received-SPF: softfail (google.com: best guess record for domain of transitioning tiff-bounces@lists.maptools.org does not designate 91.198.169.250 as permitted sender) client-ip=91.198.169.250;
Received: by 10.68.243.140 with POP3 id wy12mf5490158pbc.32;
        Tue, 19 Jun 2012 13:05:04 -0700 (PDT)
X-Gmail-Fetch-Info: info@awaresystems.be 1 pop.awaresystems.be 110 info@awaresystems.be
Delivered-To: info@awaresystems.be
Received: from mx-s.one.com (mx-s.one.com [91.198.169.250])
	by mail6.b-one.net (Postfix) with ESMTP id B60D180103FBB
	for <info@awaresystems.be>; Tue, 19 Jun 2012 21:45:12 +0200 (CEST)
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "MIME-Version"
X-Greylist: domain auto-whitelisted by SQLgrey-1.8.0-rc2
Received: from lists.maptools.org (lists.maptools.org [65.39.174.144])
	by mx-s.one.com (Postfix) with ESMTP id 5B5B9432253
	for <info@awaresystems.be>; Tue, 19 Jun 2012 19:45:12 +0000 (UTC)
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
	by lists.maptools.org (Postfix) with ESMTP id 8796D3AD9A1;
	Tue, 19 Jun 2012 14:43:47 -0500 (EST)
Received: from blu0-omc3-s30.blu0.hotmail.com (blu0-omc3-s30.blu0.hotmail.com
	[65.55.116.105])
	by lists.maptools.org (Postfix) with ESMTP id 7D3533AD9A1
	for <tiff@lists.maptools.org>; Tue, 19 Jun 2012 14:39:05 -0500 (EST)
Received: from BLU165-W47 ([65.55.116.74]) by blu0-omc3-s30.blu0.hotmail.com
	with Microsoft SMTPSVC(6.0.3790.4675); 
	Tue, 19 Jun 2012 12:39:05 -0700
Message-ID: <BLU165-W471602E3C23C9F13F88814E1FF0@phx.gbl>
X-Originating-IP: [68.52.82.129]
From: Charles Auer <bumble731@msn.com>
To: <warmerdam@pobox.com>, <tiff@lists.maptools.org>
Date: Tue, 19 Jun 2012 19:39:04 +0000
Importance: Normal
In-Reply-To: <CA+YzLBcOD98iKGWAKFhcxRsad6TwUEqSMxSCEZ25fcFaKowWHA@mail.gmail.com>
References: <CA+YzLBcOD98iKGWAKFhcxRsad6TwUEqSMxSCEZ25fcFaKowWHA@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 19 Jun 2012 19:39:05.0457 (UTC)
	FILETIME=[2FC90E10:01CD4E53]
Subject: Re: [Tiff] Libtiff 4.0.2 Released
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1560331709=="
Mime-version: 1.0
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org

--===============1560331709==
Content-Type: multipart/alternative;
	boundary="_bcccde5b-a502-4363-a14f-4fc7bba72cb4_"

--_bcccde5b-a502-4363-a14f-4fc7bba72cb4_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable



Hi Frank: tif_jpeg.c is much improved=2C but it
still =93auto-corrects=94 the subsampling factors from [2=2C 2] to [1=2C
1] for PHOTOMETRIC_ITULAB images=2C even when=2C of course=2C the
subsampling factors are indeed meant to be [2=2C 2]. At least now it admits=
 doing this=2C
generating the following error message: Improper JPEG sampling factors 2=2C=
2Apparently should be 1=2C1 Charles

 > Date: Fri=2C 15 Jun 2012 17:31:56 -0700
> From: warmerdam@pobox.com
> To: tiff@lists.maptools.org
> Subject: [Tiff] Libtiff 4.0.2 Released
>=20
> Folks=2C
>=20
> I have pushed out a 4.0.2 release.  It includes a few minor new features=
=2C
> and a variety of bug fixes=2C mostly of interest to those paranoid about
> security issues in libtiff.  If you use libtiff with untrusted input file=
s you
> might want to update.   From the version page:
>=20
> CHANGES IN LIBTIFF:
>=20
>     tif_getimage.c: added support for _SEPARATED CMYK images.
>     tif_getimage.c: Added support for greyscale + alpha.
>     Added TIFFCreateCustomDirectory() and TIFFCreateEXIFDirectory() funct=
ions.
>     tif_print.c: Lots of fixes around printing corrupt or hostile input.
>     Improve handling of corrupt ycbcrsubsampling values.
>     tif_unix.c: use strerror to get meaningful error messages.
>     tif_jpeg.c: fix serious bugs in JPEGDecodeRaw().
>     tif_jpeg.c: Fix size overflow (zdi-can-1221=2CCVE-2012-1173).
>=20
> CHANGES IN THE TOOLS:
>=20
>     tiff2pdf: Defend against integer overflows while calculating
> required buffer sizes (CVE-2012-2113).
>=20
> Hopefully I haven't botched things badly - I tried to follow the
> instructions instead of just asking Bob to do it for me this time.
>=20
> Best regards=2C
> --=20
> ---------------------------------------+---------------------------------=
-----
> I set the clouds in motion - turn up   | Frank Warmerdam=2C warmerdam@pob=
ox.com
> light and sound - activate the windows | http://pobox.com/~warmerdam
> and watch the world go round - Rush    | Geospatial Software Developer
> _______________________________________________
> Tiff mailing list: Tiff@lists.maptools.org
> http://lists.maptools.org/mailman/listinfo/tiff
> http://www.remotesensing.org/libtiff/
 		 	   		  =

--_bcccde5b-a502-4363-a14f-4fc7bba72cb4_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<style><!--
.hmmessage P
{
margin:0px=3B
padding:0px
}
body.hmmessage
{
font-size: 10pt=3B
font-family:Tahoma
}
--></style></head>
<body class=3D'hmmessage'><div dir=3D'ltr'>

<BR><p style=3D"margin-bottom: 0in=3B">Hi Frank:</p><p style=3D"margin-bott=
om: 0in=3B">&nbsp=3B</p><p style=3D"margin-bottom: 0in=3B">tif_jpeg.c is mu=
ch improved=2C but it
still =93auto-corrects=94 the subsampling factors from [2=2C 2] to [1=2C
1] for PHOTOMETRIC_ITULAB images=2C even when=2C of course=2C the
subsampling factors are indeed meant to be [2=2C 2].</p><p style=3D"margin-=
bottom: 0in=3B">&nbsp=3B</p><p style=3D"margin-bottom: 0in=3B">At least now=
 it admits doing this=2C
generating the following error message:</p><p style=3D"margin-bottom: 0in=
=3B">&nbsp=3B</p><p style=3D"margin-bottom: 0in=3B">Improper JPEG sampling =
factors 2=2C2</p><p style=3D"margin-bottom: 0in=3B">Apparently should be 1=
=2C1</p><p style=3D"margin-bottom: 0in=3B">&nbsp=3B</p><p style=3D"margin-b=
ottom: 0in=3B">Charles</p>
<br>&nbsp=3B<BR><div><div id=3D"SkyDrivePlaceholder"></div>&gt=3B Date: Fri=
=2C 15 Jun 2012 17:31:56 -0700<br>&gt=3B From: warmerdam@pobox.com<br>&gt=
=3B To: tiff@lists.maptools.org<br>&gt=3B Subject: [Tiff] Libtiff 4.0.2 Rel=
eased<br>&gt=3B <br>&gt=3B Folks=2C<br>&gt=3B <br>&gt=3B I have pushed out =
a 4.0.2 release.  It includes a few minor new features=2C<br>&gt=3B and a v=
ariety of bug fixes=2C mostly of interest to those paranoid about<br>&gt=3B=
 security issues in libtiff.  If you use libtiff with untrusted input files=
 you<br>&gt=3B might want to update.   From the version page:<br>&gt=3B <br=
>&gt=3B CHANGES IN LIBTIFF:<br>&gt=3B <br>&gt=3B     tif_getimage.c: added =
support for _SEPARATED CMYK images.<br>&gt=3B     tif_getimage.c: Added sup=
port for greyscale + alpha.<br>&gt=3B     Added TIFFCreateCustomDirectory()=
 and TIFFCreateEXIFDirectory() functions.<br>&gt=3B     tif_print.c: Lots o=
f fixes around printing corrupt or hostile input.<br>&gt=3B     Improve han=
dling of corrupt ycbcrsubsampling values.<br>&gt=3B     tif_unix.c: use str=
error to get meaningful error messages.<br>&gt=3B     tif_jpeg.c: fix serio=
us bugs in JPEGDecodeRaw().<br>&gt=3B     tif_jpeg.c: Fix size overflow (zd=
i-can-1221=2CCVE-2012-1173).<br>&gt=3B <br>&gt=3B CHANGES IN THE TOOLS:<br>=
&gt=3B <br>&gt=3B     tiff2pdf: Defend against integer overflows while calc=
ulating<br>&gt=3B required buffer sizes (CVE-2012-2113).<br>&gt=3B <br>&gt=
=3B Hopefully I haven't botched things badly - I tried to follow the<br>&gt=
=3B instructions instead of just asking Bob to do it for me this time.<br>&=
gt=3B <br>&gt=3B Best regards=2C<br>&gt=3B -- <br>&gt=3B ------------------=
---------------------+--------------------------------------<br>&gt=3B I se=
t the clouds in motion - turn up&nbsp=3B&nbsp=3B | Frank Warmerdam=2C warme=
rdam@pobox.com<br>&gt=3B light and sound - activate the windows | http://po=
box.com/~warmerdam<br>&gt=3B and watch the world go round - Rush&nbsp=3B &n=
bsp=3B | Geospatial Software Developer<br>&gt=3B __________________________=
_____________________<br>&gt=3B Tiff mailing list: Tiff@lists.maptools.org<=
br>&gt=3B http://lists.maptools.org/mailman/listinfo/tiff<br>&gt=3B http://=
www.remotesensing.org/libtiff/<br></div> 		 	   		  </div></body>
</html>=

--_bcccde5b-a502-4363-a14f-4fc7bba72cb4_--

--===============1560331709==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
--===============1560331709==--
