-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 16:34:09 +0200
Source: tiff
Binary: libtiff-doc
Architecture: all
Version: 4.7.0-3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libtiff-doc - TIFF manipulation and conversion documentation
Closes: 1141320
Changes:
 tiff (4.7.0-3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address heap-based buffer overflow in pixarlog (CVE-2026-12912)
     (Closes: #1141320)
     - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3
     - pixarlog: add comment explaining 4-byte advance in ABGR decode
     - pixarlog: complete ABGR bounds check for multi-row strip decoding
     - pixarlog: error out on invalid ABGR output buffer sizes
Checksums-Sha1:
 05c94db341d9a2f4d10c0b467c5d048601c46055 726180 libtiff-doc_4.7.0-3+deb13u3_all.deb
 7f8a8af804d22485eba172e3258581d042bbd109 9551 tiff_4.7.0-3+deb13u3_all-buildd.buildinfo
Checksums-Sha256:
 07968ec6d86d7a09f87b1040369a9dc0f8068164c6e07c95122074a73ae70242 726180 libtiff-doc_4.7.0-3+deb13u3_all.deb
 d99edcf4c47e4abf4bfed0ff077bfc0af2769d5f48a60db3e830aac20dd76833 9551 tiff_4.7.0-3+deb13u3_all-buildd.buildinfo
Files:
 eb45346af2db8a3348ce117d5a5b36e5 726180 doc optional libtiff-doc_4.7.0-3+deb13u3_all.deb
 ff8eb84aede9f53d95aa100aa2cce3bc 9551 libs optional tiff_4.7.0-3+deb13u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=mi2s
-----END PGP SIGNATURE-----