-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 16:34:09 +0200
Source: tiff
Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym
Architecture: amd64
Version: 4.7.0-3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libtiff-dev - Tag Image File Format library (TIFF), development files
 libtiff-opengl - TIFF manipulation and conversion tools
 libtiff-tools - TIFF manipulation and conversion tools
 libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti
 libtiff6   - Tag Image File Format (TIFF) library
 libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 1141320
Changes:
 tiff (4.7.0-3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address heap-based buffer overflow in pixarlog (CVE-2026-12912)
     (Closes: #1141320)
     - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3
     - pixarlog: add comment explaining 4-byte advance in ABGR decode
     - pixarlog: complete ABGR bounds check for multi-row strip decoding
     - pixarlog: error out on invalid ABGR output buffer sizes
Checksums-Sha1:
 228684dbaae47c015022e5be4e95998eee5e90f0 488456 libtiff-dev_4.7.0-3+deb13u3_amd64.deb
 6232ff7f380d3e5e479023144b9a50bc3d6cc96e 15576 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_amd64.deb
 7473bc0872377781cfd3ab25750182cfca2734e2 168624 libtiff-opengl_4.7.0-3+deb13u3_amd64.deb
 4bbe817ba61afc830bac79ec6ea3858dec4d854c 462860 libtiff-tools-dbgsym_4.7.0-3+deb13u3_amd64.deb
 51cf5d396683345d0129373f31109d54532f28c4 359688 libtiff-tools_4.7.0-3+deb13u3_amd64.deb
 f1f9e2962ddc43d60b7061c78a50aff6e4e11254 160920 libtiff5-dev_4.7.0-3+deb13u3_amd64.deb
 866eaba09f42f15150a298a9be53c1beef284b83 501320 libtiff6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 faa5bddd33fff3675e7b76863c6ef140347fb3b2 345492 libtiff6_4.7.0-3+deb13u3_amd64.deb
 189e36a0fabfad13b723144b8d2960ff75c3c9b0 21204 libtiffxx6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 d5aadc51dc5fafb992c4e274b59dc22dbe06677e 164076 libtiffxx6_4.7.0-3+deb13u3_amd64.deb
 6be4cd22abe48ce3f41f9d45940889892e61aa49 12278 tiff_4.7.0-3+deb13u3_amd64-buildd.buildinfo
Checksums-Sha256:
 06b5847f751423fa8dfe1a05dca9bdf1e6deb51fee254c5d2407ed4e32bb0a17 488456 libtiff-dev_4.7.0-3+deb13u3_amd64.deb
 9787ed64290cf0670584bcc521b034390eac58fe57a1216c4385d86611a8bdf7 15576 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_amd64.deb
 af229f769e4b688067248c6fc66ae1f138607408eb9ce8de081d27aaddd48e26 168624 libtiff-opengl_4.7.0-3+deb13u3_amd64.deb
 49a192f6f719108e375cafb0022c21b5717139243f0965ffa15ea8d80779cce2 462860 libtiff-tools-dbgsym_4.7.0-3+deb13u3_amd64.deb
 8f8028c123973249ec8928b1c081e103dab0b83d3339276df8dcfc1581d84cb1 359688 libtiff-tools_4.7.0-3+deb13u3_amd64.deb
 e198f1e7aad592d7d4770db2763060d94bbf09a1cddc896c29b5d252986e3bc8 160920 libtiff5-dev_4.7.0-3+deb13u3_amd64.deb
 4ed754d9d982ad05a0826abb1d850a8edac9f4f4f69afd2be6a5d80002da34d5 501320 libtiff6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 6bb2038f36817ae1ee6d33df03917b21835dcc2e0f3e3e80a71390e83c171173 345492 libtiff6_4.7.0-3+deb13u3_amd64.deb
 9a50948fe69aebda0b60d7f9711c5cc76741c10e5bec9200d40433939b1d152f 21204 libtiffxx6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 64d1fa23128a6658b60150c4894e6a12406e4eb8e1209f6530d10c4ae811c338 164076 libtiffxx6_4.7.0-3+deb13u3_amd64.deb
 9ec3f6cb282469cf5d1142b1abf0798acdd60dc6aa549aec6309af50721689d9 12278 tiff_4.7.0-3+deb13u3_amd64-buildd.buildinfo
Files:
 f6e384684e5433be87d565d8d64613b6 488456 libdevel optional libtiff-dev_4.7.0-3+deb13u3_amd64.deb
 decfb9ee1a6d91cfadf65dafbe5c113d 15576 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_amd64.deb
 d1fe9afdde902f0c76f9c98a04006b8d 168624 graphics optional libtiff-opengl_4.7.0-3+deb13u3_amd64.deb
 db143c0fb6509612623d0958d7c1602c 462860 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_amd64.deb
 a2e640d5d3a657b1b77614594f5dbb65 359688 graphics optional libtiff-tools_4.7.0-3+deb13u3_amd64.deb
 d11223c4178ca0854d6c83623fef98d1 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_amd64.deb
 30a23d54f9314b1c18b485d75850a563 501320 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 22c223cc85d0ec5c73daf59cf1a9b928 345492 libs optional libtiff6_4.7.0-3+deb13u3_amd64.deb
 a3374f5401bc54881e36faea2e8ca93f 21204 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_amd64.deb
 6da1cd690ada20ce2cbbe3444733fe7b 164076 libs optional libtiffxx6_4.7.0-3+deb13u3_amd64.deb
 7a8c9b016cf5f3ff3aaabaca804f7fa9 12278 libs optional tiff_4.7.0-3+deb13u3_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+KE9
-----END PGP SIGNATURE-----