Return-Path: <awaresystems.be+caf_=filtered=awaresystems.be@gmail.com>
Delivered-To: <filtered@awaresystems.be>
Received: from mx9.public.one.com ([195.47.247.105])
	by mail6.local.one.com (Dovecot) with LMTP id C7a0JKCv5VfgZgAAsyOMew
	for <filtered@awaresystems.be>; Fri, 23 Sep 2016 22:46:47 +0000
X-HalOne-ID: 9b17826f-81df-11e6-b4ba-246e961730ec
Received: from mail-qk0-f176.google.com (unknown [209.85.220.176])
	by mx9.public.one.com (Halon Mail Gateway) with ESMTPS
	for <filtered@awaresystems.be>; Fri, 23 Sep 2016 22:46:45 +0000 (UTC)
Received: by mail-qk0-f176.google.com with SMTP id n185so119498201qke.1
        for <filtered@awaresystems.be>; Fri, 23 Sep 2016 15:46:45 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-original-authentication-results:x-gm-message-state:delivered-to
         :from:to:date:user-agent:references:in-reply-to:mime-version
         :message-id:subject:precedence:list-id:list-unsubscribe:list-archive
         :list-post:list-help:list-subscribe:content-transfer-encoding:sender
         :errors-to;
        bh=E93PnMCNXpCvpmqmUB4fw36EU0qdlczxXHPj8/XUBWQ=;
        b=Rf0F6RcVL4NMzNXJtvSiHUcmHRXeUZELMYGASI6GGNQJv6e72OiHRloImuYcPNHKuk
         hFKPyfy7sPTDxch/aLwiiLVYEcRuhXKampBtHE7S/XyAzaW/T52nzoRIsbdF699LpqBf
         0SOob7Uxz5lJCcB0VPyTmKT8pOQnuJ8b685UVUdlM3naaCZBMbY5ukAGPBzI9vx/dx+P
         WKPSNG6uEiB1dJwPQjk6/rkhN/HpzlLl9g3EKCZSc0vBYOzb5Nz6zsBuyolMWZNWDhPf
         dw/XyN08VAcA9NSNBBV+29La2LZooxrnw2e37c9924T/2+7C+zIZYQj6+f/B9wlCRtnU
         Wnmw==
X-Original-Authentication-Results: mx.google.com;       spf=neutral (google.com: 94.23.4.142 is neither permitted nor denied by best guess record for domain of tiff-bounces@lists.maptools.org) smtp.mailfrom=tiff-bounces@lists.maptools.org
X-Gm-Message-State: AA6/9Rn/CY3GWoakdYlkOCCD2kR2Gk4eHhxUK9wGFFXvb2f64nLhziTIawkNoZV9cbEsC3rUevfWjqS7Gi6myqS1BOAzOm8=
X-Received: by 10.55.168.78 with SMTP id r75mr9589721qke.19.1474670804584;
        Fri, 23 Sep 2016 15:46:44 -0700 (PDT)
X-Forwarded-To: filtered@awaresystems.be
X-Forwarded-For: awaresystems.be@gmail.com filtered@awaresystems.be
Delivered-To: awaresystems.be@gmail.com
Received: by 10.55.161.4 with SMTP id k4csp771704qke;
        Fri, 23 Sep 2016 15:46:43 -0700 (PDT)
X-Received: by 10.194.18.202 with SMTP id y10mr8721820wjd.174.1474670803322;
        Fri, 23 Sep 2016 15:46:43 -0700 (PDT)
Return-Path: <tiff-bounces@lists.maptools.org>
Received: from lists.maptools.org (ks365428.kimsufi.com. [94.23.4.142])
        by mx.google.com with ESMTP id p13si5097736wmd.97.2016.09.23.15.46.42;
        Fri, 23 Sep 2016 15:46:43 -0700 (PDT)
Received-SPF: neutral (google.com: 94.23.4.142 is neither permitted nor denied by best guess record for domain of tiff-bounces@lists.maptools.org) client-ip=94.23.4.142;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 94.23.4.142 is neither permitted nor denied by best guess record for domain of tiff-bounces@lists.maptools.org) smtp.mailfrom=tiff-bounces@lists.maptools.org
Received: from [10.1.0.241] (localhost.localdomain [127.0.0.1])
	by lists.maptools.org (Postfix) with ESMTP id F30C535C0A3;
	Fri, 23 Sep 2016 17:44:00 -0500 (EST)
Received: from smtp5-g21.free.fr (smtp5-g21.free.fr [212.27.42.5])
	by lists.maptools.org (Postfix) with ESMTPS id 6B3D335C07D
	for <tiff@lists.maptools.org>; Fri, 23 Sep 2016 17:35:26 -0500 (EST)
Received: from even-desktop.localnet (unknown [88.162.84.61])
	by smtp5-g21.free.fr (Postfix) with ESMTPS id 9E4E65FF67;
	Sat, 24 Sep 2016 00:35:25 +0200 (CEST)
From: Even Rouault <even.rouault@spatialys.com>
To: tiff@lists.maptools.org
Date: Sat, 24 Sep 2016 00:34:39 +0200
User-Agent: KMail/1.13.5 (Linux/2.6.32-67-generic; KDE/4.4.5; x86_64; ; )
References: <43339E27-2FDC-4098-8C06-5A16C1D1C8FC@cisco.com>
	<alpine.GSO.2.20.1609230958550.5577@freddy.simplesystems.org>
	<57E56072.2030406@howardsilvan.com>
In-Reply-To: <57E56072.2030406@howardsilvan.com>
MIME-Version: 1.0
Message-Id: <201609240034.39194.even.rouault@spatialys.com>
Subject: Re: [Tiff] LibTIFF vulnerabilities
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org

Le vendredi 23 septembre 2016 19:03:46, Lee Howard a =E9crit :
> On 09/23/2016 08:15 AM, Bob Friesenhahn wrote:
> > While a fix may be commited to libtiff CVS expediently, this does not
> > necessarily result in an expedient fix to the millions of copies of
> > libtiff which are already in use.
> =

> Ideally there would be a coordinated release that involved packages at
> as many distributions as possible... RedHat, SuSE, Fedora, Debian,
> Ubuntu, etc.

Before that, ideally more people would help looking at fixing the issues =

themselves. I'm personnaly not going to look at the Cisco reports in the sh=
ort =

term, having already exceeded my volunteer time & energy on reports from ot=
her =

folks, and Bob wrote to me he's busy with other things. So if other libtiff =

committers want to join the party, please raise your hand.

Even

-- =

Spatialys - Geospatial professional services
http://www.spatialys.com
_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
