-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 16:34:09 +0200
Source: tiff
Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym
Architecture: armhf
Version: 4.7.0-3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libtiff-dev - Tag Image File Format library (TIFF), development files
 libtiff-opengl - TIFF manipulation and conversion tools
 libtiff-tools - TIFF manipulation and conversion tools
 libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti
 libtiff6   - Tag Image File Format (TIFF) library
 libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 1141320
Changes:
 tiff (4.7.0-3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address heap-based buffer overflow in pixarlog (CVE-2026-12912)
     (Closes: #1141320)
     - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3
     - pixarlog: add comment explaining 4-byte advance in ABGR decode
     - pixarlog: complete ABGR bounds check for multi-row strip decoding
     - pixarlog: error out on invalid ABGR output buffer sizes
Checksums-Sha1:
 0534a98f9886dc410a81235e9315488c9d6f09f1 463268 libtiff-dev_4.7.0-3+deb13u3_armhf.deb
 e20779d724da0201816dd4e806fcd94aa3d94d97 15788 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armhf.deb
 fb2253492f9b52eabd947eb02f39ccfd1a8228c1 168072 libtiff-opengl_4.7.0-3+deb13u3_armhf.deb
 f58cbeb8ceb0dddee5a9ce84b161768192fc0241 441912 libtiff-tools-dbgsym_4.7.0-3+deb13u3_armhf.deb
 d3f1018109c2c58e9b8760df37a2207419dfdc9d 348040 libtiff-tools_4.7.0-3+deb13u3_armhf.deb
 a4834011f998caa88f9ce416d4c11be60b14f245 160920 libtiff5-dev_4.7.0-3+deb13u3_armhf.deb
 4066e21f8785bd24ef5918d84425f0c3d3f02e8c 500756 libtiff6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 d763d2da364c7fdb0ef066d4b5bbeb93104151ce 322048 libtiff6_4.7.0-3+deb13u3_armhf.deb
 219d512d0a328fe478048638d376d68203123727 21660 libtiffxx6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 35015b806a73390931112999c89b234391d7a7f5 164192 libtiffxx6_4.7.0-3+deb13u3_armhf.deb
 421443ac39443019f361219c218316713ec85903 12084 tiff_4.7.0-3+deb13u3_armhf-buildd.buildinfo
Checksums-Sha256:
 af09112ff8738fd783ff1dd7224dea872a886601e2358f0f5d83e9eb3ad8dac6 463268 libtiff-dev_4.7.0-3+deb13u3_armhf.deb
 e40c0ed45cbf3980f6c51214aff2e9837e54db37017c41b5e0bb5a9fa7baafd2 15788 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armhf.deb
 11f714bcae193fb6de0b5ca36f10f4a2144ad0bff9a4c4cbd788eaedf6de9fc0 168072 libtiff-opengl_4.7.0-3+deb13u3_armhf.deb
 59c6b3d9987305215b0e9a1f1347ac3cd0fcf503ed51671903bd4ebe96bcf61d 441912 libtiff-tools-dbgsym_4.7.0-3+deb13u3_armhf.deb
 d9914d0eee353dbc5012cc96b0db46cb8315a34ff32fd9800ceaff027e9d7cd7 348040 libtiff-tools_4.7.0-3+deb13u3_armhf.deb
 b8f8bb7427369300653ed74f5323ef6116696bd2fc3b8dad76dcc34aab3ff855 160920 libtiff5-dev_4.7.0-3+deb13u3_armhf.deb
 9a8b7df2c6a194902a654f802bac20f658659791306d0b77386625d74b44efb5 500756 libtiff6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 e845342214e18361ed87f74ac80747bff90ffc031e6957a5ce2ef5b295e74259 322048 libtiff6_4.7.0-3+deb13u3_armhf.deb
 8eb7bd19bb301566522c06e0303304e190fce37c3304e071408d525b2d1dbb0c 21660 libtiffxx6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 feba79398eae35b18a1adadcf5f6370bf6c22016579f79fff0ca8e92623076c6 164192 libtiffxx6_4.7.0-3+deb13u3_armhf.deb
 da9f30209b1d815aafa0d689bf2a0b935b695e8df35255396262b248610f5399 12084 tiff_4.7.0-3+deb13u3_armhf-buildd.buildinfo
Files:
 7c8fb358bbe980ae3ccd51b4ff356b4d 463268 libdevel optional libtiff-dev_4.7.0-3+deb13u3_armhf.deb
 634aa16d5e370c792d288be6dbd731e1 15788 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armhf.deb
 ae0ec7f31fcdf5a40378b945f2e1e1b0 168072 graphics optional libtiff-opengl_4.7.0-3+deb13u3_armhf.deb
 95f3cbb7dec34018a4aab22984aefcc9 441912 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_armhf.deb
 293889a40c6dc2ea0f92bcfa98846ae6 348040 graphics optional libtiff-tools_4.7.0-3+deb13u3_armhf.deb
 33b59ddb83ae0988345145fc4c582dc1 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_armhf.deb
 ded0b0ee4071a820298156bc32afe658 500756 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 df9cb2c6dbd6413577d5476ae369d363 322048 libs optional libtiff6_4.7.0-3+deb13u3_armhf.deb
 ed62afe73fcc922e3d03ea421b44d764 21660 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_armhf.deb
 5c513867bd9aa0046db492562a5a4c18 164192 libs optional libtiffxx6_4.7.0-3+deb13u3_armhf.deb
 998af2d5816ca1eebd4c5b038d9c0b96 12084 libs optional tiff_4.7.0-3+deb13u3_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=GvAV
-----END PGP SIGNATURE-----