[Caml-list] New 3.0.2 release of the Caml Images library

[Pierre Weis]

Hi,

I'm glad to announce the availability of the 3.0.2 version of the
CamlImages library, by Jun Furuse, Fran�ois Pessaux, and Pierre Weis.

This is a bug fix release.

The software home page is:

http://cristal.inria.fr/camlimages/eng.htm

Sources and documentation are available from:

http://cristal.inria.fr/camlimages/camlimages-3.0.2.tgz
ftp://ftp.inria.fr/INRIA/Projects/cristal/caml-light/bazar-ocaml/camlimages-3.0.2.tgz

Contributions and comments are welcome.

Pierre Weis & June Furuse

CamlImages is an image processing library, which provides to the
objective Caml programmer a lot of image processing functionality.

CamlImages provides to the objective Caml programmer:

** basic functions for image processing and loading/saving various image
file formats (hence providing a translation facility from format to format),

** an interface with the Caml graphics library allows to display
images in the Graphics module screen and to mix them with Caml
drawings,

** a freetype interface, integrated into the library:
you can draw texts into images using any truetype fonts,

** a set of example programs, including gif animation, slide show,
and a postscript converter to print images.

_______________________________________________
Caml-list mailing list. Subscription management:
http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
Archives: http://caml.inria.fr
Beginner's list: http://groups.yahoo.com/group/ocaml_beginners
Bug reports: http://caml.inria.fr/bin/caml-bugs

[Mark Wong-VanHaren]

On Nov 17, 2:23 am, w...@deby.inria.fr (Pierre Weis) wrote:
> The software home page is:
>
> http://cristal.inria.fr/camlimages/eng.htm

The URL has a final 'l'. So it's:
http://cristal.inria.fr/camlimages/eng.html

Cheers,
-m

[Christophe Papazian]

Would it be possible to have this last version included in godi ? Godi
camlimages is still 2.2 !!
Thank you !

[Mehdi Dogguy]

Pierre Weis wrote:
>
> This is a bug fix release.
>

There is still a security issue not fixed in this release which concerns
TIFF images. A CVE has been announced a while ago:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3296

I tried to contact the authors (one month ago) but received no answer
yet. That's why I'm sending this message on the list: to let users and
packagers know about the bug.

The vulenarable file is “src/tiffread.c”. The patch is available at:

http://tinyurl.com/cve-tiff-1

and the source code of “oversized.h” is available at:

http://tinyurl.com/cve-tiff-2

These changes are applied in the Debian packages and were backported to
the stable and oldstable releases.

Best regards,

--
Mehdi Dogguy مهدي الدڤي
http://www.pps.jussieu.fr/~dogguy
Tel.: (+33).1.44.27.28.38