2016.10.28 19:24 "Re: [Tiff] New release ? + remaining CVE tickets", by Bob Friesenhahn

With all the annoying circus about recent security related fixes, I guess we should consider a 4.0.7 release with what is already in CVS. The flow of security reports will probably not stop soon, especially in utilities, so better release with what we already have. That said, this is just words since I'm not volunteering to do it.

I am perfectly willing to do more releases and as far as I can tell, all the resources we need to do a release do still exist. The hardest part about doing a release is preparing the release notes HTML files.

The code base is typically kept in a releasable state without loose ends.

We are likely to see more security reports for the next year or two until it becomes too expensive (e.g. CPU time) to find any remaining issues.

Bob
--
Bob Friesenhahn
bfriesen@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/