Return-Path: <tiff-bounces@lists.maptools.org>
Delivered-To: info@awaresystems.be
Received: (qmail 18292 invoked from network); 1 Sep 2008 22:08:41 -0000
Received: from chuck.telenet-ops.be ([195.130.136.1])
          (envelope-sender <tiff-bounces@lists.maptools.org>)
          by angelia.telenet-ops.be (qmail-ldap-1.03) with SMTP
          for <info@awaresystems.be>; 1 Sep 2008 22:08:41 -0000
Received: from vijay.telenet-ops.be (vijay.telenet-ops.be [195.130.136.9])
	by chuck.telenet-ops.be (8.13.1/8.13.1) with ESMTP id m81M8fK8027261
	for <info@awaresystems.be>; Tue, 2 Sep 2008 00:08:41 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by vijay.telenet-ops.be (Postfix) with SMTP id 309DF60004
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:08:41 +0200 (CEST)
Received: from penia.telenet-ops.be (penia.telenet-ops.be [195.130.132.39])
	by vijay.telenet-ops.be (Postfix) with ESMTP id 257BE60003
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:08:41 +0200 (CEST)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153])
	by penia.telenet-ops.be (Postfix) with ESMTP id C9DE033E60B
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:08:40 +0200 (CEST)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81M4pJu022491;
	Mon, 1 Sep 2008 18:05:49 -0400
Received: from vint.altlinux.org (vint.altlinux.org [194.107.17.35])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81M4lWa022487
	for <tiff@lists.maptools.org>; Mon, 1 Sep 2008 18:04:47 -0400
Received: from wo.int.altlinux.org (wo.int.altlinux.org [192.168.1.4])
	by vint.altlinux.org (Postfix) with ESMTP id CAFB83F81006
	for <tiff@lists.maptools.org>; Tue,  2 Sep 2008 02:04:45 +0400 (MSD)
Received: by wo.int.altlinux.org (Postfix, from userid 508)
	id 816543F48C83; Tue,  2 Sep 2008 02:04:45 +0400 (MSD)
Date: Tue, 2 Sep 2008 02:04:45 +0400
From: "Dmitry V. Levin" <ldv@altlinux.org>
To: tiff@lists.maptools.org
Subject: Re: [Tiff] Some security fixes from RHEL
Message-ID: <20080901220444.GA15407@wo.int.altlinux.org>
Mail-Followup-To: tiff@lists.maptools.org
References: <200808300053.35585.even.rouault@mines-paris.org>
	<48BAB60F.7040207@pobox.com>
	<Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
Mime-Version: 1.0
In-Reply-To: <Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
X-fingerprint: FE4C 93AB E19A 2E4C CB5D  3E4E 7CAB E6AC 9E35 361E
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0473677742=="
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-SpamCatcher-Score: 2 [X]


--===============0473677742==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="PNTmBPCT7hxwcZjr"
Content-Disposition: inline


--PNTmBPCT7hxwcZjr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Aug 31, 2008 at 10:38:01AM -0500, Bob Friesenhahn wrote:
> On Sun, 31 Aug 2008, Frank Warmerdam wrote:
> >
> >Honestly, I think libtiff has lots of security issues in the fact of=20
> >hostile
> >TIFF files, and I find it hard to get excited about any particular issue.
>=20
> I do agree that libtiff maintenance has not historically been in=20
> knee-jerk synchronized response to reports of security exploits.=20
> Probably there has never been a release due to a security exploit.=20

I believe 3.7.0 was released as result of security audit.


--=20
ldv

--PNTmBPCT7hxwcZjr
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAki8ZvwACgkQfKvmrJ41Nh45WgCgu+w/wZ4O1/l7FoOf/m4jca5w
bOIAoJEJvVFIgHnC7od6n2SK6CInuFEe
=eyhb
-----END PGP SIGNATURE-----

--PNTmBPCT7hxwcZjr--

--===============0473677742==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
--===============0473677742==--
