the libtiff security issues I just haven't had the time to update the port yet, but I will soon (unless somebody beats me to it :-) ).
