Processed: Re: Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

2015-10-23 Thread Debian Bug Tracking System
Processing control commands: > tags -1 pending Bug #684233 [gdal] tiff code embedded in gdal and possibly may be out of date and vulnerable Added tag(s) pending. -- 684233: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684233 Debian Bug Tracking System Contact ow...@bugs.debian.org with

Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

2015-10-23 Thread Sebastiaan Couwenberg
Control: tags -1 pending On 13-01-14 10:00, Francesco P. Lovergine wrote: > On Sat, Jan 04, 2014 at 12:59:57AM +0100, Sebastiaan Couwenberg wrote: >> Since version 1.9.2-1~exp3 in experimental the GDAL packages no longer >> expose the internal *tiff symbols, but still build with their internal >>

Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

2014-01-13 Thread Francesco P. Lovergine
On Sat, Jan 04, 2014 at 12:59:57AM +0100, Sebastiaan Couwenberg wrote: Control: fixed -1 gdal/1.9.2-1~exp3 Hi Silvio, Since version 1.9.2-1~exp3 in experimental the GDAL packages no longer expose the internal *tiff symbols, but still build with their internal copies. It doesn't

Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

2014-01-03 Thread Sebastiaan Couwenberg
Control: fixed -1 gdal/1.9.2-1~exp3 Hi Silvio, Since version 1.9.2-1~exp3 in experimental the GDAL packages no longer expose the internal *tiff symbols, but still build with their internal copies. It doesn't entirely address the issue, but the recent updates of GDAL to the latest 1.10.1

Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

2012-08-07 Thread Silvio Cesare
Package: gdal Severity: important Tags: security I have been working on a tool called Clonewise to automatically identify embedded code copies in Debian packages and determine if they are out of date and vulnerable. Ideally, embedding code and libraries should be avoided and a system wide library