Re: libtiff issue in osgeo live - also affecting debian?

[Bas Couwenberg <sebastic@xs4all.nl>]

On 2017-03-29 09:58, Johan Van de Wauw wrote:
> Just before the release of OSGeo live, an problem was detected due to
> the security update of libtiff:
>
> https://trac.osgeo.org/osgeo/ticket/1897
>
> Perhaps worth checking if debian is affected here as well?

Sure. Are you volunteering to do this?

The reverse dependencies of libtiff5 in jessie are:

 * grass
 * libgaiagraphics
 * libgeotiff-dfsg
 * liblas
 * libraterlite
 * mapcache
 * ossim

Since the GDAL version in jessie is still using the embedded copy, the 
impact in stable is probably limited.

The reverse dependencies of libtiff5 in stretch are a few more:

 * gdal
 * grass
 * libgeotiff-dfsg
 * liblas
 * libraterlite2
 * mapcache
 * mapnik
 * ossim
 * python-mapnik

The changelog for the security update [0] is huge, too many changes to 
pinpoint obvious causes.

[0] 
http://metadata.ftp-master.debian.org/changelogs/main/t/tiff/tiff_4.0.3-12.3+deb8u2_changelog

Kind Regards,

Bas