[Tiff] clarification on the fix status for new CVE-2022-3570?

2022-10-24 Thread Ellen Johnson
Hi libtiff developers, I'm confused about the new CVE reported in libtiff >= 4.4.0 related to the previous CVEs in tiffcrop.c. There's a lot of comments in the GitLab issues and I'm trying to detangle whether this is fixed in 4.4.0, or in the master branch waiting to be released into a new

Re: [Tiff] clarification on the fix status for new CVE-2022-3570?

2022-10-26 Thread Ellen Johnson
Hi Su, Thank you so much for clarifying. Do you have an estimate on the timeframe for release of 4.5.0? Thanks, ellen From: Sulau Sent: Wednesday, October 26, 2022 4:51 PM To: tiff@lists.osgeo.org Cc: Ellen Johnson Subject: AW: [Tiff] clarification on the fix status for new CVE-2022

Re: [Tiff] clarification on the fix status for new CVE-2022-3570?

2022-11-04 Thread Ellen Johnson
report? Thank you, ellen From: Ellen Johnson Sent: Wednesday, October 26, 2022 5:50 PM To: Sulau ; tiff@lists.osgeo.org Subject: RE: [Tiff] clarification on the fix status for new CVE-2022-3570? Hi Su, Thank you so much for clarifying. Do you have an estimate on the timeframe for release

Re: [Tiff] clarification on the fix status for new CVE-2022-3570?

2022-11-07 Thread Ellen Johnson
. Only under rare circumstances would we be able to obtain an exception for this policy. From: Jeff Breidenbach Sent: Friday, November 4, 2022 7:12 PM To: Kurt Schwehr Cc: Ellen Johnson ; tiff@lists.osgeo.org Subject: Re: [Tiff] clarification on the fix status for new CVE-2022-3570? And thank you

Re: [Tiff] clarification on the fix status for new CVE-2022-3570?

2022-11-07 Thread Ellen Johnson
:41 PM To: Ellen Johnson Cc: tiff@lists.osgeo.org Subject: Re: [Tiff] clarification on the fix status for new CVE-2022-3570? On Mon, 7 Nov 2022, Ellen Johnson wrote: > Thank you Kurt. And thank you to all the libtiff developers. Kurt, > thanks for your suggestion about using libtiff fro

[Tiff] libtiff configure questions on linking to different jpeg shared library name?

2023-10-25 Thread Ellen Johnson via Tiff
Hi libtiff developers! We just upgraded to libtiff v4.6.0 and want to build it with our recently added libjpeg-turbo v3.0.0. Unfortunately we had to symbol version libjpeg-turbo on Linux (on top of its existing symbol versions) to avoid symbol collisions with other libjpeg versions. As

Re: [Tiff] libtiff configure questions on linking to different jpeg shared library name?

2023-10-26 Thread Ellen Johnson via Tiff
supposed to change. Could you please let me know whether I was also supposed to edit "configure.ac"? I'll also try your suggestion of running the autogen.sh script and the -enable-maintainer mode option. Thank you! ellen From: Bob Friesenhahn Sent: Wednesday, October 25,

Re: [Tiff] error reading linearRaw subIFD from a TIFF file with libtiff built with libjpeg-turbo?

2024-02-06 Thread Ellen Johnson via Tiff
/gtiff/tif_jxl.c<https://github.com/OSGeo/gdal/blob/master/frmts/gtiff/tif_jxl.c> . I'll probably try to upstream it once libjxl reaches its 1.0 milestone. Even From: Bob Friesenhahn Sent: Monday, February 5, 2024 4:43 PM To: Ellen Johnson Cc: tiff@lists.osgeo.org Subject: Re: [Tiff]

Re: [Tiff] error reading linearRaw subIFD from a TIFF file with libtiff built with libjpeg-turbo?

2024-02-07 Thread Ellen Johnson via Tiff
yes (libjpeg turbo >= 2.2 dual mode) Am I misunderstanding the meaning of dual mode in libtiff? Thanks! ellen From: Bob Friesenhahn Sent: Tuesday, February 6, 2024 7:42 PM To: Ellen Johnson Cc: Even Rouault ; DRC ; tiff@lists.osgeo.org Subje

Re: [Tiff] error reading linearRaw subIFD from a TIFF file with libtiff built with libjpeg-turbo?

2024-02-05 Thread Ellen Johnson via Tiff
24 3:28 PM To: Ellen Johnson Cc: tiff@lists.osgeo.org Subject: Re: [Tiff] error reading linearRaw subIFD from a TIFF file with libtiff built with libjpeg-turbo? On Mon, 5 Feb 2024, Ellen Johnson via Tiff wrote: > Our imread function successfully reads the main image and the second subIFD. >

[Tiff] error reading linearRaw subIFD from a TIFF file with libtiff built with libjpeg-turbo?

2024-02-05 Thread Ellen Johnson via Tiff
Hi libtiff developers! We're now building libtiff v4.6.0 with libjpeg-turbo (instead of libjpeg v6b). Many thanks to Bob F. for his previous help with modifying libtiff/configure to allow us to build with our modified libjpeg-turbo shared library prefix! But with our libtiff v4.6.0