2010.12.06 16:32 "[Tiff] Security vulnerability CVE-2010-3847", by imipak

hi,

I notice that Mandriva and SuSE have released updates for their

libtiff packages to fix for CVE-2010-3087, but there doesn't seem to
be any sign of it in the changelog for 3.9.4 (or, indeed, earlier
releases.)

CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087

Mandriva: http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:190

SuSE: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

Is there any ETA for a fix on the main source tree?

cheers

\a

--
  wake up the past
    and tell it to stay away