2008.08.30 02:08 "Re: [Tiff] Some security fixes from RHEL", by Tom Lane

I'm just curious about how vendors usually interact with libtiff upstream team? It would have been nice if they had dropped a word on it on libtiff bugzilla...

Well, I showed this patch to Frank last week, and the RH security team told me that they had spoken with "the libtiff developers" a couple weeks before that; though I don't know exactly who they contacted.

Right at the moment I'm a bit miffed that no one is taking any interest in http://bugzilla.maptools.org/show_bug.cgi?id=1936 which seems at least as severe from a security standpoint as those LZW issues.

regards, tom lane