Re: Security issue in commons-fileup.load version 1.4 .

2021-05-28 Thread Jurrie Overgoor
On 27-05-2021 18:05, Mark Thomas wrote: On 27/05/2021 16:29, Matt Sicker wrote: As the user, you have ultimate control over transitive dependency versions that end up in your application. Using Maven, for example, you can override the commons-fileupload dependency on commons-io to the latest rel

Re: Security issue in commons-fileup.load version 1.4 .

2021-05-28 Thread Gilles Sadowski
Le ven. 28 mai 2021 à 18:42, Jurrie Overgoor a écrit : >> [...] > [...] > > In the end this would all be 'fixed' when a release would be less work. > At the risk of igniting a fierce discussion: why are Apache releases so > much work? Perhaps not so much work but, effectively in the "Commons" pro

Re: commons-dbcp2 Information Exposure Vulnerability

2021-05-28 Thread Gary Gregory
I plan on releasing Commons Pool and then looking at the PR and releasing DBCP... Gary On Wed, May 26, 2021 at 12:14 PM Matt Sicker wrote: > See https://issues.apache.org/jira/browse/DBCP-562 which is still open. > > On Wed, 26 May 2021 at 10:29, Adesina Adebiyi > wrote: > > > > Good day, > >

Write 16bit greyscale TIFF is not correct/supported

2021-05-28 Thread Rick Harding
Hi, I am trying to use apache-commons-imaging to write 16-bit greyscale TIFF images. However, the TIFF writer appears to be incorrect. Based on the compression type you get either: samplesPerPixel = 3 bitsPerSample = 8 photometricInterpretation = 2 (RGB image) or samplesPerPixel = 1 bitsPerSamp

Write of 16bit greyscale TIFF is not correct/supported

2021-05-28 Thread Rick Harding
Hi, I am trying to use apache-commons-imaging to write 16-bit greyscale TIFF images. However, the TIFF writer appears to be incorrect. Based on the compression type you get either: samplesPerPixel = 3 bitsPerSample = 8 photometricInterpretation = 2 (RGB image) or samplesPerPixel = 1 bitsPerSamp