-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 16:34:09 +0200 Source: tiff Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym Architecture: arm64 Version: 4.7.0-3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: libtiff-dev - Tag Image File Format library (TIFF), development files libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti libtiff6 - Tag Image File Format (TIFF) library libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface Closes: 1141320 Changes: tiff (4.7.0-3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Address heap-based buffer overflow in pixarlog (CVE-2026-12912) (Closes: #1141320) - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 - pixarlog: add comment explaining 4-byte advance in ABGR decode - pixarlog: complete ABGR bounds check for multi-row strip decoding - pixarlog: error out on invalid ABGR output buffer sizes Checksums-Sha1: c3267c3c76e0a1eb4dd2fff0377505a91f7fe30d 471748 libtiff-dev_4.7.0-3+deb13u3_arm64.deb dfb19420b9f455c1643cd59e5937d9177a886c33 15764 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_arm64.deb d495e810169e7a1d02f4cc062f1f92658ad16ddd 168528 libtiff-opengl_4.7.0-3+deb13u3_arm64.deb 8bf275f3fb900a5244ff226b18c015dec7bde69d 457504 libtiff-tools-dbgsym_4.7.0-3+deb13u3_arm64.deb fdf6909d9c456477d591e60107821359cf930eea 345636 libtiff-tools_4.7.0-3+deb13u3_arm64.deb 7967d0d4360e454b69ad10078a80929402ea259c 160920 libtiff5-dev_4.7.0-3+deb13u3_arm64.deb 87445a0cad9de39bcec1eb8ff5c9829376d8078b 495384 libtiff6-dbgsym_4.7.0-3+deb13u3_arm64.deb 5e4fec5c53e730725b92a01b3e6663878562fa79 325232 libtiff6_4.7.0-3+deb13u3_arm64.deb c9141bb72ce0b8cf123f5d83f9d2531f6c31edb7 21372 libtiffxx6-dbgsym_4.7.0-3+deb13u3_arm64.deb 1a36132c881113bfa17e078b018346b3edfca01e 164236 libtiffxx6_4.7.0-3+deb13u3_arm64.deb b3c50e411ac71bb8907013f4efa1b4b026691149 12202 tiff_4.7.0-3+deb13u3_arm64-buildd.buildinfo Checksums-Sha256: b214c63994ab32dba934d7652e9395d1ca54f7b0abb1529fb9cfcc7443f2c102 471748 libtiff-dev_4.7.0-3+deb13u3_arm64.deb 1a2c9326dd3d97417010fe6c8e1286c8f2605c7a6a89c7d8d105b02cec32a163 15764 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_arm64.deb 8248eedf5ef1ce774195668f527c126055fd977724a76effe3a87714d5e66242 168528 libtiff-opengl_4.7.0-3+deb13u3_arm64.deb 06f8f1bed576bde1ce24016bcebe60efbb8f331ce358b02bf27e1ac7d4fbdc5c 457504 libtiff-tools-dbgsym_4.7.0-3+deb13u3_arm64.deb 519b748838bffd8fc29d087920725e8ae4c63b6c08c78900071403427fbbc830 345636 libtiff-tools_4.7.0-3+deb13u3_arm64.deb 4f651609c670d0766ff7880c5a7322967ba8a81ed5a8cf5e9dd79fde3b3e3264 160920 libtiff5-dev_4.7.0-3+deb13u3_arm64.deb ee1478f33d9f06a3d44afc6e62dcd7bfa724d1953d50ed5f2f737804b31a85a0 495384 libtiff6-dbgsym_4.7.0-3+deb13u3_arm64.deb 208e9fdc14ed88a30f31fdfb993d1e8ab19f9ab29f3cd8546ffb4ea3f74f5a3f 325232 libtiff6_4.7.0-3+deb13u3_arm64.deb ecd023b1261b83fd5be4b77197d59c33993263d5b20306de51704cbec22f422b 21372 libtiffxx6-dbgsym_4.7.0-3+deb13u3_arm64.deb b97fba9ee005ab92f2e751c17c8149f9f7144befe704e37c66e83fdc9f2268ba 164236 libtiffxx6_4.7.0-3+deb13u3_arm64.deb 3c723d75388035d3cab4fbe9893a594306c0fb46fc9d82575b8a1ea49dc79537 12202 tiff_4.7.0-3+deb13u3_arm64-buildd.buildinfo Files: 75d74df2758bd59d28f0df4067ae1e2d 471748 libdevel optional libtiff-dev_4.7.0-3+deb13u3_arm64.deb 8aec878c54c98cbdcdaf79c086c04d9b 15764 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_arm64.deb 9328215d34bbdf595a4af45d8c8328aa 168528 graphics optional libtiff-opengl_4.7.0-3+deb13u3_arm64.deb 479fa3d1ad74774fb73ba25ab117be32 457504 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_arm64.deb af0ae3042f081c3656607a7e39e16ee8 345636 graphics optional libtiff-tools_4.7.0-3+deb13u3_arm64.deb 67dccc1b1e1ead57261bd9a9af3003c7 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_arm64.deb 3bcaede56a85ccd1360dd72d1b92e380 495384 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_arm64.deb 663c60f3559787976656bd89a3094622 325232 libs optional libtiff6_4.7.0-3+deb13u3_arm64.deb 8c4198eeac9c466d8d95cccf09906dce 21372 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_arm64.deb 7b7913a5b7f60c9d7da5d34491348833 164236 libs optional libtiffxx6_4.7.0-3+deb13u3_arm64.deb 92176b4be112083948485010c969cd8a 12202 libs optional tiff_4.7.0-3+deb13u3_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmpb6aoACgkQScpU3dYu lLiyjBAAgSBt8mWQ/rVVQPD51zjntM8WlgrJia1FKCQOIhJVI4cql97Lmkp//eqm GwRdFOzdd8uJfdg5my/4QDntn2BDsu71hJyUKfvV7JpCBYiHJP3I8F5521BpdmKg 3X7zOj1uYLpxP0Yer5wEq2Gv0F7Sn3m6ysViRUFDhQNSQGYhNaRqtrkOPz1nFf+G irY9V2ZQFqTqiEHfo6DkY06cUsjM2B1Z1AbHWIVpMIY7lr+EUC04olkbwX6/pD/h rL87NBw2oa0wLoddNCmlio2VaaivDwrsEPBg4OuSgr1f+eNdAHro3e8hKTIOOpqv q8Sfi8/3UU8mVlpNKAC1MtbyQ0pEHALaf6K1b10ZPPTUuoSg336CdHAyXtXQAwwa vyrFPuj/R1lgiydYY+2QBUY9eRtSe0a1QAMwreAoFUDnM6X1eQ7oLdwe+j+x51hd DlFVKnc1XlakWe+BloMCBeHX7dpuwXHyuGiuNy75Yxd+C5luiE51Ms9AxPlvEl5F nFvAgISruhmG28OkuzaXlqzWsQ2lzzInTEQSsOWJqqFkAeRW3LNBW+AKtBEGnoYX U85MBZcb8cKtnIx5LK6uVXwjws2hUwHFK5aCr7oNsKpF7Xj/adxjih8TQNQWgCS0 SIVcKIuPPjs6JJvef3on+wD52rf6l4bMGGtFlbooaY2yjUmSGpU= =2mlK -----END PGP SIGNATURE-----