Return-Path: <awaresystems.be+caf_=filtered=awaresystems.be@gmail.com>
X-Original-To: filtered@awaresystems.be
Delivered-To: filtered@awaresystems.be
Received: from mx-k.one.com (mx-k.one.com [91.198.169.58])
	by mail9.b-one.net (Postfix) with ESMTP id C4639400707
	for <filtered@awaresystems.be>; Mon,  9 Apr 2012 15:20:17 +0200 (CEST)
X-Virus-Scanned: by one.com
Received-SPF: pass (mx-k: domain of awaresystems.be+caf_=filtered=awaresystems.be@gmail.com designates 209.85.210.41 as permitted sender)
X-Greylist: whitelisted by SQLgrey-1.8.0-rc2
Received: from mail-pz0-f41.google.com (mail-pz0-f41.google.com [209.85.210.41])
	by mx-k.one.com (Postfix) with ESMTP id 42A164FAB98
	for <filtered@awaresystems.be>; Mon,  9 Apr 2012 13:20:17 +0000 (UTC)
Received: by dajx4 with SMTP id x4so6017383daj.0
        for <filtered@awaresystems.be>; Mon, 09 Apr 2012 06:20:16 -0700 (PDT)
Received: by 10.68.226.42 with SMTP id rp10mr19175701pbc.162.1333977616344;
        Mon, 09 Apr 2012 06:20:16 -0700 (PDT)
X-Forwarded-To: filtered@awaresystems.be
X-Forwarded-For: awaresystems.be@gmail.com filtered@awaresystems.be
Delivered-To: awaresystems.be@gmail.com
Received: by 10.142.101.10 with SMTP id y10csp65285wfb;
        Mon, 9 Apr 2012 06:20:15 -0700 (PDT)
Received: by 10.68.217.97 with SMTP id ox1mr19592061pbc.81.1333977614509;
        Mon, 09 Apr 2012 06:20:14 -0700 (PDT)
Received-SPF: softfail (google.com: best guess record for domain of transitioning tiff-bounces@lists.maptools.org does not designate 91.198.169.249 as permitted sender) client-ip=91.198.169.249;
Received: by 10.130.148.6 with POP3 id v6mf3923543dad.16;
        Mon, 09 Apr 2012 06:20:14 -0700 (PDT)
X-Gmail-Fetch-Info: info@awaresystems.be 1 pop.awaresystems.be 110 info@awaresystems.be
X-Original-To: info@awaresystems.be
Delivered-To: info@awaresystems.be
Received: from mx-r.one.com (mx-r.one.com [91.198.169.249])
	by mail9.b-one.net (Postfix) with ESMTP id E087C400707
	for <info@awaresystems.be>; Mon,  9 Apr 2012 15:12:58 +0200 (CEST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.8.0-rc2
Received: from lists.maptools.org (lists.maptools.org [65.39.174.144])
	by mx-r.one.com (Postfix) with ESMTP id 9F7C27908C6
	for <info@awaresystems.be>; Mon,  9 Apr 2012 13:12:58 +0000 (UTC)
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
	by lists.maptools.org (Postfix) with ESMTP id 9DA081EDAE8;
	Mon,  9 Apr 2012 08:11:57 -0500 (EST)
Received: from na3sys009aog119.obsmtp.com (na3sys009aog119.obsmtp.com
	[74.125.149.246])
	by lists.maptools.org (Postfix) with ESMTPS id A66571EDAE1
	for <tiff@lists.maptools.org>; Mon,  9 Apr 2012 08:10:57 -0500 (EST)
Received: from hub3.qnx.com ([209.226.137.86]) (using TLSv1) by
	na3sys009aob119.postini.com ([74.125.148.12]) with SMTP
	ID DSNKT4Lf35kriY6G7kGF0TbgpyIeMJ6TGz1T@postini.com;
	Mon, 09 Apr 2012 06:11:24 PDT
Received: by hub3.qnx.com (Postfix, from userid 32767)
	id EF4C46C51B1; Mon,  9 Apr 2012 09:10:54 -0400 (EDT)
Received: from EXHTS1.ott.qnx.com (exhts1 [10.222.2.110])
	(using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by hub3.qnx.com (Postfix) with ESMTPS id 48EAF6C51AE;
	Mon,  9 Apr 2012 09:10:52 -0400 (EDT)
Received: from EXMBX1.ott.qnx.com ([fe80::c5ad:e9ef:74ad:52de]) by
	EXHTS1.ott.qnx.com ([fe80::f573:de57:f69d:f285%13]) with mapi id
	14.01.0355.002; Mon, 9 Apr 2012 09:09:50 -0400
From: Christopher Cameron <ccameron@qnx.com>
To: Frank Warmerdam <warmerdam@pobox.com>
Thread-Topic: [Tiff] Security Fix
Thread-Index: AQHNFBW0OlwqT2D4+EqNm1o7/NzRN5aSjPYA
Date: Mon, 9 Apr 2012 13:09:49 +0000
Message-ID: <CBA857C1.375C%ccameron@qnx.com>
In-Reply-To: <CA+YzLBf16Ukpr6Wz6F2u=f3uKG0ox+pgqPVEtOVVHa=qKNi3Lg@mail.gmail.com>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.222.102.221]
Content-ID: <30978CCE8B422C44884698CE98454FDA@qnx.com>
MIME-Version: 1.0
Cc: "tiff@lists.maptools.org" <tiff@lists.maptools.org>
Subject: Re: [Tiff] Security Fix
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org

Has someone decided to investigate libtiff4 yet?

Chris Cameron
Software Developer - Multimedia/Camera
ccameron@qnx.com




On 12-04-06 12:52 PM, "Frank Warmerdam" <warmerdam@pobox.com> wrote:

>Folks,
>
>There has been an overflow problem reported with libtiff that could
>represent a security compromise when operating on potentially hostile
>files in an unsafe context.  A fix is applied in 3.9 branch and CVS HEAD.
>They are also available in the ticket if someone wants to apply them.
>
>Some distributions pushed the fix out already this week:
>
>  http://bugzilla.maptools.org/show_bug.cgi?id=2369
>
>Best regards,
>-- 
>---------------------------------------+----------------------------------
>----
>I set the clouds in motion - turn up   | Frank Warmerdam,
>warmerdam@pobox.com
>light and sound - activate the windows | http://pobox.com/~warmerdam
>and watch the world go round - Rush    | Geospatial Software Developer
>_______________________________________________
>Tiff mailing list: Tiff@lists.maptools.org
>http://lists.maptools.org/mailman/listinfo/tiff
>http://www.remotesensing.org/libtiff/

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
