From sacadmin Thu Aug 5 10:59:59 2010 Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o75HxxuV004820; Thu, 5 Aug 2010 10:59:59 -0700 (PDT) Received: (from johnf@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o75Hxx8R004816; Thu, 5 Aug 2010 10:59:59 -0700 (PDT) Date: Thu, 5 Aug 2010 10:59:59 -0700 (PDT) From: John Fischer Message-Id: <201008051759.o75Hxx8R004816@sac.sfbay.sun.com> To: PSARC-record@sac.sfbay.sun.com Cc: laszlo.peter@oracle.com Subject: libtiff 3.9.4 [PSARC/2010/314 Self Review] Status: RO Content-Length: 588 Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. 1. Introduction 1.1. Project/Component Working Name: libtiff 3.9.4 1.2. Name of Document Author/Supplier: Author: Laszlo Peter 1.3 Date of This Document: 05 August, 2010 4. Technical Description See the case directory for more detail 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: JDS 6.5. ARC review type: Automatic 6.6. ARC Exposure: open From johnf@sac.sfbay.sun.com Thu Aug 5 11:02:42 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o75I2gTk004963 for ; Thu, 5 Aug 2010 11:02:42 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o75I2f9v010742 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 5 Aug 2010 11:02:41 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L6O0060DY4H7000@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Aug 2010 11:02:41 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6O00IQAY4H4090@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 05 Aug 2010 11:02:41 -0700 (PDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [10.5.240.67]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o75I2eDG003100; Thu, 05 Aug 2010 11:02:40 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o75I2ep6004960; Thu, 05 Aug 2010 11:02:40 -0700 (PDT) Received: (from johnf@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o75I2euY004959; Thu, 05 Aug 2010 11:02:40 -0700 (PDT) Date: Thu, 05 Aug 2010 11:02:40 -0700 (PDT) From: John Fischer Subject: Re: libtiff 3.9.4 [PSARC/2010/314 Self Review] To: PSARC-ext@sun.com Cc: laszlo.peter@oracle.com Message-id: <201008051802.o75I2euY004959@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 3795 All, I am sponsoring this case for Laszlo (Laca) Peter from the desktop group. I have made this an automatic approval if anyone is concerned with that then I'll set a timer for next week. Just let me know. The case directory contains this proposal. This project upgrades the libtiff image library code base from the open source upstream from 3.8.2 to the latest version, 3.9.4. Patch release binding is requested. Thanks, John Title: libtiff 3.9.4 Case: PSARC/2010/314 Submitter: Laszlo Peter Owner: John Fischer Timeout: Automatic 1.0 Introduction 1.1 Project/Component Working Name: libtiff 3.9.4 for Solaris 1.2 Purpose This project upgrades the libtiff image library code base from the open source upstream from 3.8.2 to the latest version, 3.9.4. Patch release binding is requested. 2.0 Description libtiff is a library for reading and writing TIFF (Tag Image File Format) images. The package also includes some command line utilities for simple manipulations of TIFF files. 2.1 Security Issues Addressed This release fixes multiple security vulnerabilities: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2443 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2347 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1411 2.2 Additional Changes The differences from release to release are documented on the libtiff web site: http://www.remotesensing.org/libtiff/v3.9.4.html 3.0 Delivery This project is targetting a Patch release of the Solaris OS. Availability and file locations: +-----------------------+-----------------------------------------------+ | Package name | File locations | +-----------------------+-----------------------------------------------+ | SUNWTiff | /usr/lib/libtiff.so.3 | | IPS: | /usr/lib/{amd64,sparcv9}/libtiff.so.3 | | image/library/libtiff | /usr/bin/* | +-----------------------+-----------------------------------------------+ | SUNWTiff-devel | /usr/include/tiff.h | | IPS: | /usr/include/tiffconf.h | | image/library/libtiff | /usr/include/tiffio.h | | | /usr/include/tiffvers.h | +-----------------------+-----------------------------------------------+ 4.0 Interface Classification The project exports the following interfaces: +-----------------------------------------------------------------------+ | Interfaces Exported | +------------------------------+--------------------+-------------------+ | Interface Name | Classification | Comment | +------------------------------+--------------------+-------------------+ | libtiff.so.3 | Committed | LSARC/2006/464 | | TIFF utilities | Uncommitted | LSARC/2006/464 | +------------------------------+--------------------+-------------------+ | SUNWTiff | Committed | package names | | SUNWTiff-devel | Committed | | | image/library/libtiff | Committed | | +------------------------------+--------------------+-------------------+ 5.0 References Original ARC case: LSARC/2003/085 Most recent update: LSARC/2006/464 Upstream Web site: http://www.remotesensing.org/libtiff