[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: libtiff issue in osgeo live - also affecting debian?



On 2017-03-29 09:58, Johan Van de Wauw wrote:
Just before the release of OSGeo live, an problem was detected due to
the security update of libtiff:

https://trac.osgeo.org/osgeo/ticket/1897

Perhaps worth checking if debian is affected here as well?

Sure. Are you volunteering to do this?

The reverse dependencies of libtiff5 in jessie are:

 * grass
 * libgaiagraphics
 * libgeotiff-dfsg
 * liblas
 * libraterlite
 * mapcache
 * ossim

Since the GDAL version in jessie is still using the embedded copy, the impact in stable is probably limited.

The reverse dependencies of libtiff5 in stretch are a few more:

 * gdal
 * grass
 * libgeotiff-dfsg
 * liblas
 * libraterlite2
 * mapcache
 * mapnik
 * ossim
 * python-mapnik

The changelog for the security update [0] is huge, too many changes to pinpoint obvious causes.

[0] http://metadata.ftp-master.debian.org/changelogs/main/t/tiff/tiff_4.0.3-12.3+deb8u2_changelog

Kind Regards,

Bas


Reply to: