Bug#684233: tiff code embedded in gdal and possibly may be out of date and vulnerable

[Sebastiaan Couwenberg]

Control: tags -1 pending

On 13-01-14 10:00, Francesco P. Lovergine wrote:
> On Sat, Jan 04, 2014 at 12:59:57AM +0100, Sebastiaan Couwenberg wrote:
>> Since version 1.9.2-1~exp3 in experimental the GDAL packages no longer
>> expose the internal *tiff symbols, but still build with their internal
>> copies.
>>
>> It doesn't entirely address the issue, but the recent updates of GDAL to
>> the latest 1.10.1 upstream release should include updates to the
>> internal libraries.
> 
> Well, we should also establish if the inner implementation still makes sense
> as in the past, now that BigTiff implementation is provided by stock library.
> At the time of my switch to the inner tiff lib, I was motivated mainly by 
> that.

One of the changes in the packaging for GDAL 2.0 is the switch to the
system provided lib(geo)tiff instead of the internal copies.

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1