Return-Path: <tiff-bounces@lists.maptools.org>
Delivered-To: info@awaresystems.be
Received: (qmail 14026 invoked from network); 1 Sep 2008 22:14:28 -0000
Received: from kudos.telenet-ops.be ([195.130.136.13])
          (envelope-sender <tiff-bounces@lists.maptools.org>)
          by angelia.telenet-ops.be (qmail-ldap-1.03) with SMTP
          for <info@awaresystems.be>; 1 Sep 2008 22:14:28 -0000
Received: from vijay.telenet-ops.be (vijay.telenet-ops.be [195.130.136.9])
	by kudos.telenet-ops.be (8.13.1/8.13.1) with ESMTP id m81MESuH010056
	for <info@awaresystems.be>; Tue, 2 Sep 2008 00:14:28 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by vijay.telenet-ops.be (Postfix) with SMTP id 2BF2F60005
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:14:28 +0200 (CEST)
Received: from circe.telenet-ops.be (circe.telenet-ops.be [195.130.132.51])
	by vijay.telenet-ops.be (Postfix) with ESMTP id 15F2760003
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:14:28 +0200 (CEST)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153])
	by circe.telenet-ops.be (Postfix) with ESMTP id 9F64033E6A
	for <info@awaresystems.be>; Tue,  2 Sep 2008 00:14:27 +0200 (CEST)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81MAn4Y022651;
	Mon, 1 Sep 2008 18:11:38 -0400
Received: from vint.altlinux.org (vint.altlinux.org [194.107.17.35])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81MAjDc022648
	for <tiff@lists.maptools.org>; Mon, 1 Sep 2008 18:10:46 -0400
Received: from wo.int.altlinux.org (wo.int.altlinux.org [192.168.1.4])
	by vint.altlinux.org (Postfix) with ESMTP id 6E9663F81006
	for <tiff@lists.maptools.org>; Tue,  2 Sep 2008 02:10:44 +0400 (MSD)
Received: by wo.int.altlinux.org (Postfix, from userid 508)
	id 05F023F48C83; Tue,  2 Sep 2008 02:10:43 +0400 (MSD)
Date: Tue, 2 Sep 2008 02:10:43 +0400
From: "Dmitry V. Levin" <ldv@altlinux.org>
To: tiff@lists.maptools.org
Subject: Re: [Tiff] Some security fixes from RHEL
Message-ID: <20080901221043.GB15407@wo.int.altlinux.org>
Mail-Followup-To: tiff@lists.maptools.org
References: <200808300053.35585.even.rouault@mines-paris.org>
	<48BAB60F.7040207@pobox.com>
	<Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
	<20080831210931.GA5480@bitwizard.nl>
	<Pine.SOC.4.64.0808311630310.1110@freddy.simplesystems.org>
	<48BB1652.1050103@howardsilvan.com>
	<Pine.SOC.4.64.0808311718560.1110@freddy.simplesystems.org>
Mime-Version: 1.0
In-Reply-To: <Pine.SOC.4.64.0808311718560.1110@freddy.simplesystems.org>
X-fingerprint: FE4C 93AB E19A 2E4C CB5D  3E4E 7CAB E6AC 9E35 361E
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0399481587=="
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-SpamCatcher-Score: 2 [X]


--===============0399481587==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="kORqDWCi7qDJ0mEj"
Content-Disposition: inline


--kORqDWCi7qDJ0mEj
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Aug 31, 2008 at 05:21:50PM -0500, Bob Friesenhahn wrote:
> On Sun, 31 Aug 2008, Lee Howard wrote:
> >
> >I don't think that a full security audit is being requested.  Rather, I=
=20
> >think that the original poster is simply asking that these things be=20
> >addressed as they are reported.
>=20
> There has not been a refusal to address the issue but there is no=20
> commitment yet as to when (and if) a replacement for 3.8.2 would=20
> become available.  The 3.9.0beta package is currently not binary=20
> compatible with libtiff 3.8.2.  Libtiff 4.0.0 is still on the horizon=20
> as well.

I'm doubt that security people are going to audit code which is
"still on the horizon", they rather choose smth close to production.


--=20
ldv

--kORqDWCi7qDJ0mEj
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAki8aGMACgkQfKvmrJ41Nh4h9gCdEWCutQRoiguLRqOD5h7t9hTj
OgoAn3QZ8oW0BL5qxsEp1qeF5p/Mo9HR
=b8uV
-----END PGP SIGNATURE-----

--kORqDWCi7qDJ0mEj--

--===============0399481587==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
--===============0399481587==--
