Return-Path: <SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org>
Received: from mailfep003.skynet.be ([10.35.132.229])
          by mailafep055-svc.mx.internal
          (InterMail vM.9.07.03.022 201-2473-138-3) with ESMTP
          id <20220522130506.JXHE3927.mailafep055-svc.mx.internal@mailfep003.skynet.be>
          for <chris.lindelaan@skynet.be>; Sun, 22 May 2022 15:05:06 +0200
Received: from el10155.bc ([10.29.1.11]) by mailfep003.skynet.be
          (InterMail vM.8.04.03.28.4 201-2389-100-182-103-20180124)
          with ESMTP
          id <20220522130505.RSBI7196.mailfep003.skynet.be@el10155.bc>
          for <chris.lindelaan@skynet.be>; Sun, 22 May 2022 15:05:05 +0200
Received: from [52.71.63.89] ([52.71.63.89])
 by el10155.bc with ngmta
 id 227108d8-16f16f1c3a9f4e92; Sun, 22 May 2022 15:05:05 +0200
Received-SPF: None (mx201.skynet.be: no sender authenticity
  information available from domain of
  tiff-bounces@lists.osgeo.org) identity=pra;
  client-ip=140.211.15.3; receiver=mx201.skynet.be;
  envelope-from="SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="tiff-bounces@lists.osgeo.org";
  x-conformance=sidf_compatible
Received-SPF: Pass (mx201.skynet.be: domain of
  SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org
  designates 140.211.15.3 as permitted sender)
  identity=mailfrom; client-ip=140.211.15.3;
  receiver=mx201.skynet.be;
  envelope-from="SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-conformance=sidf_compatible; x-record-type="v=spf1";
  x-record-text="v=spf1 mx a:mail.osgeo.org a:lists.osgeo.org
  a:mail.osgeo.osuosl.org ip4:140.211.15.3 a:osgeo7.osgeo.org
  a:trac.osgeo.org a:dev.trac.osgeo.org
  a:secure.osgeo.osuosl.org ip4:140.211.15.57
  ip4:140.211.15.32 ip4:140.211.15.26 ip4:140.211.15.6"
Received-SPF: PermError (mx201.skynet.be: cannot correctly
  interpret sender authenticity information from domain of
  postmaster@lists.osgeo.org) identity=helo;
  client-ip=140.211.15.3; receiver=mx201.skynet.be;
  envelope-from="SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org";
  x-sender="postmaster@lists.osgeo.org";
  x-conformance=sidf_compatible; x-record-type="v=spf1";
  x-record-text=""
Authentication-Results: mx201.skynet.be; spf=None smtp.pra=tiff-bounces@lists.osgeo.org; spf=Pass smtp.mailfrom=SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org; spf=PermError smtp.helo=postmaster@lists.osgeo.org; dkim=hardfail (body hash did not verify [final]) header.i=@lexort.com
X-Ironport-Dmarc-Check-Result: validskip
IronPort-SDR: DhKnabb+aVlXFm5LIqiSM3Bl0tS7La6OQBUsU4pbIvj+vR7F0AyO+ZvMAYi30ushgXvAB0YIyJ
 cok9zuNC1ZpB2Aluxo4y/wgi4dk3R8veSEmGUORlad9jbMqpdE22VItaZnPEo2pqjqZin8xpbX
 /9SQSFpD6c4eIqrUQkB+XZXRVxyaCLQxr6pyIsPaHu4EkJFDsydHgGWAlp4VzaY1Vu/5ztSeIE
 pvy8kPFiwCqKmXFBQKi6C34GdOCTJQJjlnpJ8JYyQbV2V9mjtoqbbjQuzP+IYLB8GhxVk/BEdG
 na82LhvFFeOCxj9LjftC9PrN
X-Proximus-RemoteIp: 140.211.15.3
X-Proximus-Mfrom: SRS0=kkCo=V6=lists.osgeo.org=tiff-bounces@osgeo.org
X-Proximus-Rcpto: chris.lindelaan@skynet.be
X-IPAS-Result: =?us-ascii?q?A0GOAwDPNIpihwMP04xaHgEBCxIMQIFEC4IkARgBZFgnA?=
 =?us-ascii?q?gEISoRPiQCIDQMWiw6Ed4IHikKBbQQPBwEBAgEBAQEBBAUsDQkEAQEBAgEDi?=
 =?us-ascii?q?j4gBQEEMgcOAQIBAwEBAQEDAgMBAQEBAQEDAQEBBAEBAQIBAQIEAgIBAQIQA?=
 =?us-ascii?q?QEBAQ0LCQUICgceBTxkZARmBl8EgXQMMw2CNQUCAx8BBm6BBwEBAQEBAQEBA?=
 =?us-ascii?q?QEBAQEBAQEBAQEBFgINUmcBAgIBAQEBIB0BAQQKHgsBAgIBAQIGAQEKIRkEB?=
 =?us-ascii?q?AICAwELAQQTAQQxEwUVgmMBgnMkBQqrKHgCgTGBAYIIAQEGgT8BhEmBVQcJg?=
 =?us-ascii?q?TyBVIRRh0R6Q32BEHobNoJ0PoFTgQ8BBIFLg2iCZZYxAxwyNRKBIUQtAQgGB?=
 =?us-ascii?q?gcKBTIGAgwYFAQCExJTHQITBQcKHA4UHCQZDA8DEgMRAQcCCxIIFSwIAwIDC?=
 =?us-ascii?q?AMCAyMLAgMYCQcKAx0IChwSEBQCBBMfCwgDGh8tCQIEDgNDCAsKAxEEAxMYC?=
 =?us-ascii?q?xYIEAQGAwkvDSgLAxQPAQYDBgIFBQEDIAMUAwUnBwMhBwsmDQ0EHAcdAwMFJ?=
 =?us-ascii?q?gMCAhsHAgIDAgYXBgICcQooDQgECAQcHiUTBQIHMQUELwIeBAUGEQkCFgIGB?=
 =?us-ascii?q?AUCBAQWAgISCAIIJxsHFhEIHRkBBV0GCwkiHCwLBgUGFgMkeAUKISgBHZVSD?=
 =?us-ascii?q?IJkViACOSoWgS0+oVEOnwODV4sbjQCIBB+FRKMVggeUYI0slGmFG4FoAjOBW?=
 =?us-ascii?q?jMaCBsVO4JoCUUBAwINAgECAwECAQICAQECAwEBAo4dg3KECIEMhWZZOwIGA?=
 =?us-ascii?q?QoBAQMJi3GBbgEB?=
IronPort-PHdr: A9a23:bqQbCBduRysVOW6zs+UXQ0vnlGM+j9DLVj580XLHo4xHfqnrxZn+J
 kuXvawr0AWSG9uLoK8Vw8Pt8InYEVQa5piAtH1QOLdtbDQizfssogo7HcSeAlf6JvO5JwYzH
 cBFSUM3tyrjaRsdF8nxfUDdrWOv5jAOBBr/KRB1JuPoEYLOksi7ze+/94PdbglShTewYrx+I
 RWyoA7MqsQYnIxuJ7orxBDUuHVIYeNWxW1pJVKXgRnx49q78YBg/SpNpf8v7tZMXqrmcas2S
 7xYFykmPHsu5ML3rxnDTBCA6WUaX24LjxdHGQnF7BX9Xpfsriv3s/d21SeGMcHqS70/RC+v5
 Ll3RhD2lCgHNiY58GDJhcx2kKJbuw+qqxhmz4LJfI2ZKP9yc6XAdt0YWGVBRN5cWSxfDI6iY
 YsBAegOM+VWoIbyulUOtRmzCwuxCO7h1jNHmmH53bYh3uQkDQ3KwBYtE84UvXnWqtj+KaccU
 fqyzKnN1TjNbulW1iny6IPVbB4hu/aMXL1ufsrV1EIiEAzFgUiMqYH+OzOayOsMs2+B7+p8T
 +6gl2knqwRorzWp28wjhZXHiJgPxVDY6SV23pw1JdugRUNnbtOoDZhduiCVOYdqRs4vQGJlt
 Sk4x7AIp5K2eDQGxZQoyRPQavGKcoaG7xbiWeuNLzl1inxodbawihuu7UWtzPD3WMez0FZPt
 CVFk9/Mu2gC1xzS9siHTuFy8Vy71TmT0ADT7+dJKl03m6rDM5Mt37E9moYJvUjdAyP6hV/6g
 LKWe0k+9OWk8+bqbqj8qpOBM4J4kBzyP6stl8ClBek1MA4DVHWB9+umzr3s50j5Ta1KjvIol
 qnZt4jXJcAapq6iHw9VyZwv6xGkDzepztsYmmMLLFVfeBKIl4TpOlfOL+7kDfqnnlihnytny
 +rYMrH8H5nBNGXPnbf7cbtz80JczRA8zdFb55JaELEBJ/fzV1fsutLEExE1LxS5w+XkCNhj0
 YMTQW2AD66BPaPWsF+I/f4vI/KWaI8Sozb9JOYq5/n0gX8+g18dcrGk3YcWaHC2EPRqOl6WY
 X3xgtcHDWgFoBE+QfftiF2ZXj5ceXGyU7g75jEhB4KqFYHDSZu1j7ybwCi7BoFWZnxBCl2UD
 Hvkb5+EVOsUaCKOPs9hlSQJWqShS4871BGurxX2y75mLurS5yIXq5bj28Jv6O3Vjhwy7j90D
 sSb026TU2F4hHgHSCFllJ15ulF3n1efzbBj0bsfEd1I++gPVRw1OJmayPZ1TNX7WwbEd9HOT
 066Q9KgGnYtT9w/kOIIeFt3TtCrjxTf2Hi2ArEb0qaGHYE56b7023nqO907zG3J2a5niEMpF
 dBSP2+rjbIq6g7IGoTSmF+Ynav5SKIHwSTt+W6PwHDbvF1ESBUiFuLBXGsDfQ3Rttv04QXFV
 bDpDL0mNg5Iz4mFMrdLbdvyyklHSvmwBdLFfmiRlm68CAzdw7qNaJbtKXkc0iuYEkUdjg0I4
 V6CNBMiHWGmuG3TC3ppD124eF7m8+R1tCamSFQpxRqBdUxr2umJ/Us4m/GaA8kUw7sZvDtp/
 zhqEVD7xdXLAseEuyJ6ZKxAYNo58UwB3mXc4V9TJJuleo94i1FWTx5wr07qn0F4BplolcU6q
 2k2igF1LPTLgxt6azqE0MWoafXsIW7o8UXqMvaOsrmj+MjDo/RH4aEisFympwGgTBd8oD1sh
 sNY13KM65mNFwsXSZb8AQ47ohx3t7bAfm824IaHnWY5NKC1tmynuZo1UbJ7l036JYsBYP7XX
 AXyRv0UAZOjBP0vlHiPaSsvHcp+pbcQAIC6TtG30ZTxEMhYgy20on5hzNA+zU3ZpE8eAu6d8
 YwCxqOk2VmsXGXHkV2jv8vry7pJazwIE2y0xDO2KIdNa/9Te8MxBH+qMoiLwYYb5dbnDnhE0
 EKPIwxZhpbxa13OUEaj5w9f6WZPo3iOlDa4kRBUvxd39+207Tyf4fTffTUmADFrS0V41nbxB
 qGzhYERDRGZCmphzCWi6B/22ahJhJ9zATDvYXtZXnTXEnxLC/SXlYqSRMtJ7c0SvHRGYvyGY
 FOWdqXtgjYg8C7OITVd4xsLZzCLkb/l+n4yj02wD1FNg0qaIZtggine9dPxa8ILwBlFHBhkh
 n6NLVexGJq53s6+lMKQ+vD7VnimUIVUazWu146bqS+nsG1jGxGxlvG3yZX3VAkg1inj0MN2E
 CjSthHmN4Ps27XyMet8fgFkBVO07c1mUp9ziIo+ldkj13kcj5GgrhLv8E/2IY8DgOTlb2sLS
 CJNydOGqBP91hhFKXSEj5n8Sm3b2tFoMsW7bG1T0CUg6ctHE4+Q7adYhm1yuVW1qkTWe/cu1
 iwFx64W4WUBy/oMpBJryyycBr4IGkwNBhbXz0GL7Pu5+ZsJMWKuaqSrkk1lkt2mSraYrVRAW
 Xj3P50lACl7495XN0nD3Xq17ZvrK5HLddxGjhCOljrale9PYIk0iuJMhSdjPjflumY5zucgk
 RF09ZW7p5ScbWJ286++RBlCOW69a8AS/2TthLxSkM+X28jvFJJtC30LVYDoBf6pHHoUsuivK
 QuUETMt4kSVGLzWGTreoEdrpn7CCdaqYlmTKWke18kkTx6YTKBGqCYTWjhy3pspTFjzgtfiY
 UF0+nYb6wywrBwE0e9uOxTlGm7CuAelbCs1Q5mDPX80pklD4UnSK8mX8uN0GWlR4JSgqAWHL
 mHTaR5PCCkFXUmNBlarObfLh5GI7+mWCK+0KObIariVgehfTOuTg5W03YZhuTGWOYTHP3VvC
 eE6xlsWRWpwSKG7030ETy0akT6IbtbO/UvkvHcu94bmrbKwC0r16ICCCqVfK4Bq60ru2OGYN
 P+WiTo/IzsLs/FEjXLO1rUb20Yfzi90cDz4W486jnaYT6H7nfppUUsfajhvL41P9K0x2U9KI
 8GOltL72PtyieMzAFpefVv6lcyuI8sQLCvuUTGPTFbOL7mAKTDRlovrYK2yDLdXkeNfugaYv
 TeAD1SlOS+Mmj6vUAqge7Ip7mnTLFlVv4ezdQxoAG7oQYf9axG1B9RwiCU/3bw+gn6i2Xc0C
 TFnaAsNq63KtXoemfZuHWFdqHBof6GInCOQ7u+QLZhz07MjOR5Pz7dZ4189noULuSVFX+Bu3
 izJodNp5Va8nbyTyzRpFRBJtzBAiZmjul5tNKKf8YNPPBSMtB4A9mSfDR0WqsAtU4G3/foJk
 56WyeSoYD5Zu8rZ584dG9TZJIqcPXwtPACofVycRAoJQDi3NH3O0klUkfWc7HqQ/dAxrpnhn
 oZLS6cODQBtUKlDUwI8QZpZc/IVFns+nLWWjdAF/y+7vEOJHYNBvYHBW+7UC/i8TVTRxbRCe
 RYMxqv1aIoJMYiukXdYUQEvn4fhHB/uA4VJozZ9dUkzu0pA9z55VGJmx0PrZEan52IVHvOvt
 hkthQZ5J+M3+32/hjV/bkqPvyY2nEQrzJ/euwvJJT3yB6DlY98DDyvvq1N3NYj0TgEzahe9y
 FBlOjmBTbVMibBtbkhskwDRvt1IA/EWHsgmKFcAgPqQYfsvy1FVrC6qkFRG6eXyApxnjAI2c
 JSooiEIy0d5YdUyP6CVOLtRww0amPeVpiHxnLNUokdWNwMX/WiVYiJNpEEYKuxsOX+z5uI1o
 QmS0zIRfWENU7wtuf1n8QU6IevIxnDk0qVfMQa2LOOSKOWeoWel94bASwE130IM0U5e8rVxl
 8A4bk2PUwYo1rTZFgxVZ5OecUcPNpMUrSWVJm6H4+LWzp9yYMO6De/lSqmJrqlx4ArsFVQ1B
 Y0HqMMaEZSrlkbCIo/ufrII11Mx/g3gYlKeA/lOPhWRn1Jl64m2noR61pRHK3caGmpwNmOw/
 avQvQtsh+CMFNYuPiVDAtNCbCtvHpTn3XMG2hYIRDivjrBAlFDEtWal4H2NSmKmJ9t7OKXNO
 UsqUojvv2xitfLowV/PrseHezm8b407/IaSr71Qz3qeI8tZV7xQqV3bgcEYQmzwCzeJCt2kI
 ZXsLYMhP5T/A3C8VUD3gDUvVcr6INK8S8rAyQDuWYtOqJOWwHg4OMmxGytWEgpsp+wF+KN3Z
 BESK5s9bxnysg0iNqu5aAmC1dDmT2GoIDpQB/5RqIfyL6RQ1DYpZ/SmxWEISpAh0/Lx9lUCS
 ZZMiQvRhL6ia4RYTSnvCylddgHI9k9b3yBqMuc/xPt6wQud6AVEdWrSLaowNSof7JkmCFifI
 Gt7ED89VwXE1MzY4R+q0qxU9SYO+rQcmeBDrnX6uYfSJTy2X6n+467viHJ1btsNpPhPb9nnI
 9Car9XZhTPSS9/XqALQTC+0Gb9QncVWKy9DaP5Tlmwif8sctsASjCh5Htd7PLFJBKQ28/qyb
 iF4CCcJ0SIDf4eBxyAZxOCn1Lbd0BCKf95xVX5M+IUHidwbXSlsZyoYr6L2TITamViPTW0TK
 RsS5wBBt0oQ05V9def/7M/UXYdBnnRI9ulsXHKBRfwKvxPrD3ubil/iRLC9nvy1iEgYpBoJ+
 t0aQwJkT09GyOtR0EwyJ+MvQ0H/lonRvTKPM0TgszC0oANHDF1Q0tHPMVrjA4fC823mXX9Ck
 UA=
IronPort-Data: A9a23:Y5NpKqipPnGETRhvLTEnQ2yaX161EhQKZh0ujC45NGQN5FlGYwSy9
 lOraxnFY6jUMyawOYxoOc7lxf41yZeAzN5jSgpkpS88En5A9ZPID9mVfxz+Nn3JcpDOEh1tt
 JgXY4LNdM5lEHGNqhv8beaw8yYjivzVH7SmBbGUZX8ZqWOIMMsEoUsLd7kR29806TTAPz6wh
 D/SnyH+EA6pgGQpOW9Mtf3S+Bpm7f/+4m5B7gc1bvoStwOGxydIAs9Pf6q6IiehHdIKEr6wT
 b/IkeC38G3UoxwhA9/9wuanKx1bSbP7A1SyhysNUcBOoPTjSg/ecEofHKBBAauCo2zRx7id8
 P0U6droD15B0pTkwIzxaTEBe81FFfAAqeavzUSX65TJlRWbKSG0mp2CMWlvVWEm0rYoaY1x3
 aFAQNw9RkjrazWeme/TpkFE36zPHeGzVG8tkigIIQLxV57Kdav+r5Diube06h9p2J8RQqyHO
 aL1XhI0BPjIS0Un1l76k/vSls/w7pX0W2QwRF54OcPbSoUcpeB8+OGFDTbbRjCFbcJOwGKVr
 EeZxlnWXUkIGc2t4mPZyFv504cjnQujMG4TPLm57eJxxlqIyWEUThoMWjNXo9Hg1hb4AYsGb
 RVJvHFGQasarCRHSvHGZSbg9X2HlRlJZYQFF+wh9BrLzbHb7gHfAXILGyJAZtJjvsgrQzcnz
 XeOhNzkAnpoqrL9pXe1q+7O9m7sZndKRYMETRADY1ovyvfZnLwyn0nXRdF6GqG7hPSgTFkcx
 BjR8Hhj1utP5SIR7I2w/UrGmHSop57FQwo87wP/RWG06A5lIoSoD7FE8nDc9vlNK9jfSUKOs
 X9CnNOD6/sKS5aXm0RhXdnhApmu/KihPTf53mdSMMZ55Rm8yVX6Ibp5tWQWyFhSDu4IfjrgY
 Un2sAxX5YNOMHbCUUORS9/qYyjN5fW/fekJRsw4ffISPsYsKVTvEDVGIBfKhDm2zRBEfbQXY
 8/DGftAG0r2HkiOINCebuMX2Lk6rszV7TKMHsqip/hLPFz3WZJ4YbAeP1aJMKY+96yJp0PS6
 MtYLM/MzA9QOAEfXsU12dFJRbzpBSJjbXwTlyCxXrLeSuaBMD18Y8I9OZt7J+RYc119z48kB
 E2VVE5C00bYjnbaMwiMYX0LQOqxAM0m8C1rZnB3bQbAN50fjWCHsft3m3wfIOZPyQCf5acpJ
 xX4U5zfXq8UFFwrBRxGNcKVQHNemOSD3l7eYnv7PFDTjrZmShDW/cXnNgXo7mEDAje8vNc/p
 Lvo3wXXCYAOXAlrFs3WIPOph1SrsHcanopPs7jgfLFulLHX2NEycUTZ16dpS+lRd0mr7mbEh
 m6+XEdJzcGQ8tRd2ISY1cis8d31e8MgRRAyNzeAst6L2dzypTfLLXloC7rTIlgwlQrcpM2fW
 Ami562maqNbwg8X49sU/nQC5ftW2uYDboRyk2xMNHHGf1OxFvVrJXzu4CWFnvcdrlOAkQfpC
 E+J5PdAPrCFZJHsHFILeVN3Vd64jaQXmRLVuMprdUH7/zNsur2cXkhVeR6Wh3lBLbV7dYki3
 OEqtdU+7Bewhx1sNcyJ13gG+2OJJ30GcqMmqpBDWdS60lR2lwETbMyOEDLy7bGOd85IbhsgL
 AiSifeQnL9b3EfDLyc+GCGVj+pQjJgDoj5Qy1oGKwjbk9bJnKZrjhJd7RwzQxRS1AkB2OV2Y
 zA5O0pwLKSI3jFpmMkcAD/1S1sdXEWUoxWjxUEImWvVS1iTelbMdGBta/yQ+E058n5HemQJ9
 r+vzmu4Ay3he9v833dvVENo967jQNh2+lGQkcyrBZ3YTZ07eib+xKi1amcP7Rz9Dppp1kHAo
 OBr+sd2aLH6bHdL8vVlVtTKhLlAGgqZIGFiQO16+P1bF2/reAa0hWqEJXe3d54fPPfN60K5V
 5djK5MdUxWlyBuItS0RAaJQcbZ4kOR1uIgCZq/zPjxB9L+etSZy9pXL+SX5wmgxTJJrmMc5L
 4rXMDWaDm2Xg2ATh27DosRIZjixbdUeP1Ou2em09PkORY4Cvu8pa0wrz7avo12RMRB75FSTp
 wzOYOnR1eM1kNw+k4zpG6RFJgO1NdKqDb/ZqF7u7oQfYIOdK9rKuiMUtkLjYVZcM4wRbNIrx
 76Dh9j6gRHet7EsXmGFwJSMGvUb/8m0R+YLYMv7IGMAxnmFQ8Dh5EVF/Hu3JJsPl8hA4dKjA
 QyiZ5LoJ9ISXt5cwlxTajRfSk5DVvSmNf64+y7t/e6RDhU90BDcKI31/3HebVZdKn0CNar4B
 1KmoP2p/N1Z8N9BCRJs6yuK2HOkzIIPmJfKduEdcRGcD3K0mRWFobTvklwn8z6j5rysDpPh+
 ZycLvThXErahU0K5IgxX09OUtk/C21yjO52eVgSkzKzoy7vF3YIdIzxLr1fYqy5UUXOOFXQY
 DDWcHBkDj7yUDMCdg/ziDgmssFzGcRWUurEyvcVE494pst46E5swFesy8u430pLRw==
IronPort-HdrOrdr: A9a23:2w8Haa1mSGi1lM7OtfDrOgqjBEckLtp133Aq2lEZdPU0SKalfg
 6V/MjztCWE+wr5PUtOpTnuAtjkfZrjz+8G3WB8B9mftUzdyQ+VxK8L1/qS/9TLIVyDygZlvZ
 0QDZSX4rXLfChHZL/BkXaF+rUbsaC6GcKT9IDj5lF1QQZSRZgI1XYaNu/BKDwKeOAuP/NQf/
 fx2iMEnUvCRZ05VLXPOpBvZZm6mzSkrvPbiFI9dngaAMjnt0LS1FZ0eyLopCsjbw==
X-IronPort-Anti-Spam-Filtered: true
X-MGA-submission: =?us-ascii?q?MDGhlVRNNL9ugGwVjs1V3ZLOAz1fawT5iwbPip?=
 =?us-ascii?q?oWYxxKLXZEZOtnzNDOI3lT7E+WwH9IUFsWh069rInRrCROLX7aSOKBUL?=
 =?us-ascii?q?IB6J0ADe/L+s8y4g7aE5qZE2/gP6czomjupE8=3D?=
Received: from osgeo6.osgeo.osuosl.org (HELO lists.osgeo.org) ([140.211.15.3])
  by mx201.skynet.be with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 May 2022 15:04:53 +0200
Received: from osgeo6.osgeo.osuosl.org (localhost [127.0.0.1])
	by lists.osgeo.org (Postfix) with ESMTP id C769F6145916;
	Sun, 22 May 2022 06:04:47 -0700 (PDT)
Received: from s1.lexort.com (s1.lexort.com [71.19.148.97])
 by lists.osgeo.org (Postfix) with ESMTPS id 584066145947
 for <tiff@lists.osgeo.org>; Sun, 22 May 2022 06:04:46 -0700 (PDT)
Received: by s1.lexort.com (Postfix, from userid 10853)
 id C32DD4107E4; Sun, 22 May 2022 09:04:45 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=lexort.com; s=mail;
 t=1653224685; bh=Xfn3eDymgHNoQCIBD9qLW+tQBYaR2DFPwwzGrND8+wg=;
 h=From:To:Cc:Subject:References:Date:In-Reply-To;
 b=ntLtDL77610z/4Wr6RjgTJ0jlAeuh6DHDN61/CYx9JxUaGIR7HgDr3IuOAob9c91Y
 0Voe1dvhzHSdF1THTyI4IUuA17OKXxOmnm6Re9yZpRikdTsxIERKeEV6kOCXxiICBt
 oGEKOVGX+02x/ViygEFT2vK+0Ytg/2CgeO+xKsBk=
From: Greg Troxel <gdt@lexort.com>
To: Even Rouault <even.rouault@spatialys.com>
Cc: "tiff\@lists.osgeo.org" <tiff@lists.osgeo.org>
References: <a7091823-0885-c749-51e0-2ca0e98848fa@spatialys.com>
 <CACmBxys51DTEvV2=nEaO3qtRzQtzC6XX_E8DDPv=7YyF2Y0+RA@mail.gmail.com>
 <rmi1qwmbeo3.fsf@s1.lexort.com>
 <ed2db9cf-9083-ce6b-af1b-4a99359b5ee4@spatialys.com>
OpenPGP: id=098ED60E
Date: Sun, 22 May 2022 09:04:45 -0400
In-Reply-To: <ed2db9cf-9083-ce6b-af1b-4a99359b5ee4@spatialys.com> (Even
 Rouault's message of "Sun, 22 May 2022 12:05:44 +0200")
Message-ID: <rmi8rqt90r6.fsf@s1.lexort.com>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (berkeley-unix)
MIME-Version: 1.0
Subject: Re: [Tiff] libtiff v4.4.0 RC1 available
X-BeenThere: tiff@lists.osgeo.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.osgeo.org>
List-Unsubscribe: <https://lists.osgeo.org/mailman/options/tiff>,
 <mailto:tiff-request@lists.osgeo.org?subject=unsubscribe>
List-Post: <mailto:tiff@lists.osgeo.org>
List-Help: <mailto:tiff-request@lists.osgeo.org?subject=help>
List-Subscribe: <https://lists.osgeo.org/mailman/listinfo/tiff>,
 <mailto:tiff-request@lists.osgeo.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============7800324026815413125=="
Errors-To: tiff-bounces@lists.osgeo.org
Sender: "Tiff" <tiff-bounces@lists.osgeo.org>
X-VadeSecure-Score: -100
X-VadeSecure-Verdict: clean
X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrieekgdeivdcutefuodetgg
 dotefrodftvfcurfhrohhfihhlvgemucfrtffqigfkofgfufenuceurghilhhouhhtmecufedtude
 nucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhephffvvehfffgjkfgfggfuphej
 jfdufedttggvshesmhdttdertderjeenucfhrhhomhepifhrvghgucfvrhhogigvlhcuoehgughts
 ehlvgigohhrthdrtghomheqnecuggftrfgrthhtvghrnhepteegudekiefgtdelkeekgeejfedvle
 dthefggeeiieffleeitefffeefleegteetnecuffhomhgrihhnpehgihhtlhgrsgdrtghomhenucf
 kphepudegtddrvdduuddrudehrdefpdejuddrudelrddugeekrdeljeenucevlhhushhtvghrufhi
 iigvpedtnecurfgrrhgrmhepihhnvghtpedugedtrddvuddurdduhedrfedpmhgrihhlfhhrohhmp
 efutffutdepkhhkvehopeggieeplhhishhtshdrohhsghgvohdrohhrghepthhifhhfqdgsohhunh
 gtvghssehoshhgvghordhorhhgpdhnsggprhgtphhtthhopedupdhrtghpthhtoheptghhrhhishd
 rlhhinhguvghlrggrnhesshhkhihnvghtrdgsvgdpmhhouggvpehsmhhtph

--===============7800324026815413125==
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha1; protocol="application/pgp-signature"

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Even Rouault <even.rouault@spatialys.com> writes:

> Le 22/05/2022 =C3=A0 02:21, Greg Troxel a =C3=A9crit=C2=A0:
>> I locally updated the pkgsrc package to 4.4.0rc1.  That builds with
>> autoconf, and that seems right because README.md documents autoconf as
>> the build system.
>>
>> It looks like patches for the following were applied (as the pkgsrc
>> patches show as reversed and I dropped them):
>>    patches/patch-CVE-2022-0561
>>    patches/patch-CVE-2022-0907
>>    patches/patch-CVE-2022-0909
>>    patches/patch-CVE-2022-0924
>>    patches/patch-CVE-2022-22844
>>
>> I don't find "CVE" in ChangeLog and there is no NEWS so it's hard to be
>> sure.
> Noting in the news which commit fixes which CVE would be a super
> painful exercice, since there are not mentioned in commit messages, so
> we'd have to go back to each ticket/merge request and look if someone
> mentioned a CVE number.

Sure, I realize that's hard.  But that degree of cross-correlation isn't
what I was getting at.

As a user and packager, I want to see NEWS, which omits 99% of what's in
a changelog and mentions:

  API breaks
  API additions
  ABI breaks
  CVEs fixed
  anything else that's a big deal to a user

I realize volunteer time is slim etc. but it would be really nice if
commit and merge messages reference CVEs when known.

Looking at the patches in pkgsrc:

  * patch-CVE-2022-0561

    https://gitlab.com/libtiff/libtiff/-/issues/362
    This fixes CVE-2022-0561 and CVE-2022-0562.

  * patch-CVE-2022-0907

    [PATCH] add checks for return value of limitMalloc (CVE-2022-0907)
    https://gitlab.com/libtiff/libtiff/-/merge_requests/314.patch

    [PATCH] tiffcrop: fix issue #380 and #382 heap buffer overflow in
     extractImageSection (CVE-2022-0891)
    https://gitlab.com/libtiff/libtiff/-/commit/46dc8fcd4d38c3b6f35ab28e532=
aee80e6f609d6.patch

  * patch-CVE-2022-0909

    [PATCH] fix FPE in tiffcrop
    https://gitlab.com/libtiff/libtiff/-/merge_requests/310.patch

  * patch-CVE-2022-0924

    [PATCH] fix heap buffer overflow in tiffcp
    https://gitlab.com/libtiff/libtiff/-/commit/408976c44ef0aad975e0d1b6c6d=
c80d60f9dc665.patch

  * patch-CVE-2022-22844

    https://gitlab.com/libtiff/libtiff/-/issues/355

    This fixes CVE-2022-22844.

I followed the issue/MR links and the fixes were all merged.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQS7wyAjWilQwVHG9Vsf2nroCY7WDgUCYoo07QAKCRAf2nroCY7W
Dkp6AKCA7m/EH7sclUahSP7FYBUUmmFyBQCfTz3NMnIbZZth+wfGotxTXPr/Rfk=
=cGmg
-----END PGP SIGNATURE-----
--=-=-=--

--===============7800324026815413125==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tiff mailing list
Tiff@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/tiff

--===============7800324026815413125==--
