Return-Path: <tiff-bounces@lists.maptools.org>
Delivered-To: info@awaresystems.be
Received: (qmail 15829 invoked from network); 3 Sep 2008 17:40:54 -0000
Received: from cliffy.telenet-ops.be ([195.130.136.2])
          (envelope-sender <tiff-bounces@lists.maptools.org>)
          by angelia.telenet-ops.be (qmail-ldap-1.03) with SMTP
          for <info@awaresystems.be>; 3 Sep 2008 17:40:54 -0000
Received: from vijay.telenet-ops.be (vijay.telenet-ops.be [195.130.136.9])
	by cliffy.telenet-ops.be (8.13.1/8.13.1) with ESMTP id m83HesiN018800
	for <info@awaresystems.be>; Wed, 3 Sep 2008 19:40:54 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by vijay.telenet-ops.be (Postfix) with SMTP id 6963360003
	for <info@awaresystems.be>; Wed,  3 Sep 2008 19:40:54 +0200 (CEST)
Received: from apate.telenet-ops.be (apate.telenet-ops.be [195.130.132.43])
	by vijay.telenet-ops.be (Postfix) with ESMTP id 62CEE60002
	for <info@awaresystems.be>; Wed,  3 Sep 2008 19:40:54 +0200 (CEST)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153])
	by apate.telenet-ops.be (Postfix) with ESMTP id 1BF4827EC02
	for <info@awaresystems.be>; Wed,  3 Sep 2008 19:40:53 +0200 (CEST)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m83HVFvw017787;
	Wed, 3 Sep 2008 13:39:58 -0400
Received: from homer.shelbyville.oz
	(ppp121-45-32-154.lns10.adl2.internode.on.net [121.45.32.154])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m83HVAJN017783
	for <tiff@lists.maptools.org>; Wed, 3 Sep 2008 13:31:11 -0400
Received: from ron by homer.shelbyville.oz with local (Exim 4.69)
	(envelope-from <ron@debian.org>) id 1KawCC-0006Pz-6s
	for tiff@lists.maptools.org; Thu, 04 Sep 2008 03:01:08 +0930
Date: Thu, 4 Sep 2008 03:01:08 +0930
From: Ron <ron@debian.org>
To: tiff@lists.maptools.org
Subject: Re: [Tiff] Some security fixes from RHEL
Message-ID: <20080903173108.GA24350@homer.shelbyville.oz>
References: <200808300053.35585.even.rouault@mines-paris.org>
	<48BAB60F.7040207@pobox.com>
	<Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
	<20080831210931.GA5480@bitwizard.nl>
	<Pine.SOC.4.64.0808311630310.1110@freddy.simplesystems.org>
	<48BB1652.1050103@howardsilvan.com>
	<Pine.SOC.4.64.0808311718560.1110@freddy.simplesystems.org>
	<20080903082156.GA3889@ak4719.spb.edu>
	<Pine.SOC.4.64.0809031006190.1110@freddy.simplesystems.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.SOC.4.64.0809031006190.1110@freddy.simplesystems.org>
User-Agent: Mutt/1.5.18 (2008-05-17)
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: ron@debian.org
X-SA-Exim-Scanned: No (on homer.shelbyville.oz);
	SAEximRunCond expanded to false
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-SpamCatcher-Score: 10 [X]

On Wed, Sep 03, 2008 at 10:11:39AM -0500, Bob Friesenhahn wrote:
> On Wed, 3 Sep 2008, Andrey Kiselev wrote:
>
>> On Sun, Aug 31, 2008 at 05:21:50PM -0500, Bob Friesenhahn wrote:
>>> The 3.9.0beta package is currently not binary compatible with libtiff
>>> 3.8.2.
>>
>> Please, remind me what's the problem with binary compatibility between
>> 3.8.2 and 3.9?
>
> I am not positive.  I believe that ron at debian.org expressed concern  
> some time ago so the concerns should be archived in the list.

That probably would have been Jay < qjb @ d.o >, he maintains our
tiff packages and keeps a pretty close eye on the symbol changes.

> More than likely the issue is due to insertion of a couple more members 
> (UaToAa & Bitdepth16To8) toward the end of TIFFRGBAImage in tiffio.h 
> which blows any existing access to row_offset & col_offset.
> A more careful analysis is necessary to assure there are no other  
> issues.

That definitely rings a bell, and it was discussed here a while
back if there is an intact archive.

  Ron


_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
