I see that Adobe Illustrator is also on the list.

http://www.us-cert.gov/cas/bulletins/SB12-135.html

I guess one needs to be careful what they open or view with these apps until the exploits are patched.

..and the beat goes on...

Linus' Law (on open source): "Given enough eyeballs, all bugs are shallow".

I like the climb down by Adobe on charging for security patches. I am really pleased that I use linux.

http://www.zeropaid.com/news/100970/use ... y-updates/

I knew about PS's bug, but not XNView. PS wasn't going to patch it (they originally said the fix would be to upgrade to CS6), but they got shamed into doing so, but I've not received the patch yet (yes, I have and use PS for RAW processing since there is not free or open source solution that I like that even comes close to ACR imo; pretty much the only time I use PS is to open my RAW output from my Leica). I won't be upgrading anymore since they now require $200 every other year (was milking it for every 3rd upgrade; I upgraded from CS2 to CS5 for instance). I mainly (like 99%) use GIMP anyway, and I have faith that GIMP will soon be able to at least open up 16/32 bit images and edit them too but I do have little hope about RAW processing (I do complaineth too much; lol).

You've probably tried this one already Lyle but in case you haven't: http://www.rawtherapee.com/ Somebody on Youtube recommends it.

I have UFRaw (stinks) and I've tried a few other free programs, but not Raw Therapee (sort of gave up on the free RAW processors a few years back. I might one day try Raw Therapy but if it's based on DCRaw like UFRaw is, I have little faith that I would like it.

Agree that Lightroom is one of the best and Aperture is great if you are on the MAC. It is unfortunate that the Leica does not come with its own software. Rawtherapee is based on DCRaw and a couple of other algorithms. It's been a long time since I have used RT.

I'm thinking about going Lightroom Partha; a cheaper solution, but I'm really hoping to see a free or Open Source viable solution to the RAW problem. Personally, I don't plan on getting a new Camera any time soon so CS5 will last me even a decade if necessary, so I have all the time in the world (don't plan on upgraded my Win7 any time soon; XP lasted over 11 years now and I'm typing this in my XP VM. lol).

I'll continue this thread hijack by evangelising for the FOSS solution I use, Photivo, as a RAW processor and yes, I think it is based on DCRaw (I'm curious: what is your objection to dcraw?).

Meet the GIMP has done a couple of episodes on Photivo relatively recently: Episode 176 & Episode 177 that give a good taster.

Kevin

Lyle, give delaboratory a shot. You can download from my website or from Jacek's site. Same build. Right now, send to Gimp goes to my Gimp-2.7. We'll update in version 0.8.

Edit: Oh, and delaboratory use 32-bit float and so color corrections are far superior to 8-bit integer based software.

Again, don't kill me for my opinion. lol

Oh, I have no desire to ever upgrade PS again and I'm not the only one. You should see some of the posts that I've seen ad DPR of late and these guys are super PS users. Adobe really is screwing things up so viva la FOSS. I will try Delaboratory someday Partha but for now, I'm pretty happy with ACR and I'm no photog so I might actually open PS 3 times a month if that. lol

I tried rawtherapee but found that I liked photivo better. I didn't know about the xnview problem, thanks.

Don't get too paranoid about these bulletins. In case anyone has not read it

"Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types"

So it should certainly be considered but in the context that.
It is a crafted file, not every psd file. I suppose it depends from where you get your psd files Maybe convert before opening in xnview.
Applies to xnview before 1.98.5 & the current version is 1.98.8

There was a similar announcement recently for (was it) pcx files which for me is not a file type that I commonly (ever) use.

Finally it still does not apply if you use the RobA's shell-out script which uses png as an intermediate file.

I had a quick search and nothing comes up about XnViewMP which is from the same author.