-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 16:34:09 +0200
Source: tiff
Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym
Architecture: i386
Version: 4.7.0-3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libtiff-dev - Tag Image File Format library (TIFF), development files
 libtiff-opengl - TIFF manipulation and conversion tools
 libtiff-tools - TIFF manipulation and conversion tools
 libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti
 libtiff6   - Tag Image File Format (TIFF) library
 libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 1141320
Changes:
 tiff (4.7.0-3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address heap-based buffer overflow in pixarlog (CVE-2026-12912)
     (Closes: #1141320)
     - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3
     - pixarlog: add comment explaining 4-byte advance in ABGR decode
     - pixarlog: complete ABGR bounds check for multi-row strip decoding
     - pixarlog: error out on invalid ABGR output buffer sizes
Checksums-Sha1:
 0eea214ea18222e03c43cea3763d6c84aa55a8f9 512616 libtiff-dev_4.7.0-3+deb13u3_i386.deb
 dd48fd13a396710a88fe87dce50529cfe42a47fd 14784 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_i386.deb
 2a27490411570bab306cc8e4939fc8dab6889bc2 168788 libtiff-opengl_4.7.0-3+deb13u3_i386.deb
 d2605860b3625577ad232ec388fb16c5f566183c 413092 libtiff-tools-dbgsym_4.7.0-3+deb13u3_i386.deb
 680a6697a92f7ce4772310fe1ba72a09cd8d368a 364740 libtiff-tools_4.7.0-3+deb13u3_i386.deb
 c8733104630925325a2af21f883599086f0fe70f 160920 libtiff5-dev_4.7.0-3+deb13u3_i386.deb
 ea667a918c398d0d919a651a68c16b5af487d90c 449376 libtiff6-dbgsym_4.7.0-3+deb13u3_i386.deb
 b26d4700d745dfebd022bbcef537d72081ba27a3 360640 libtiff6_4.7.0-3+deb13u3_i386.deb
 918755cab3de686f30c0fce8ac44d1140d678949 20492 libtiffxx6-dbgsym_4.7.0-3+deb13u3_i386.deb
 79f1adeee150703b446baca0665568ed37a4c718 164800 libtiffxx6_4.7.0-3+deb13u3_i386.deb
 688041956209a3de1c655c8e56d41c4af59c4a31 12155 tiff_4.7.0-3+deb13u3_i386-buildd.buildinfo
Checksums-Sha256:
 171da526071d806586010414ae6ce0b8910679317384d107a9e0f385d6cd7030 512616 libtiff-dev_4.7.0-3+deb13u3_i386.deb
 924cf23e7fcb645765cb3c497b917ceb640c1e1684f5b94707d075979c763159 14784 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_i386.deb
 ab6e7e63d0a8eb9a84450496c625419c63eb2dbc4598f8886fed8a27cf7ad1a1 168788 libtiff-opengl_4.7.0-3+deb13u3_i386.deb
 df350fca88c4ec4156fb538fe6a8c0ca7e6675fc082b6204e4612e1bf56ba51a 413092 libtiff-tools-dbgsym_4.7.0-3+deb13u3_i386.deb
 24f1128b7e0540b9dc6da8f11516c8cd4a8451f07566add17fb91b62bd838316 364740 libtiff-tools_4.7.0-3+deb13u3_i386.deb
 5e5c7824ffbfb055f9f7137c591f38f4da591d7d28ba03294ae08b7eec8e5ab7 160920 libtiff5-dev_4.7.0-3+deb13u3_i386.deb
 f28a3f673d880412efdc0f84fd4a4366032dc2cccc7a9d2a21d7be247462b8c4 449376 libtiff6-dbgsym_4.7.0-3+deb13u3_i386.deb
 9a3bcddc1d3d29ef886ae174546ae84e8ed43f0d5d55135ec742e771a99abecc 360640 libtiff6_4.7.0-3+deb13u3_i386.deb
 0191568082f7ee47922aeb20f5c33bd8be8660f6693e03c84e3054673d43b65a 20492 libtiffxx6-dbgsym_4.7.0-3+deb13u3_i386.deb
 a630e3573e4b0c66a1d35481b1ec853e4677b85a1f252816eb46c8fb500f886e 164800 libtiffxx6_4.7.0-3+deb13u3_i386.deb
 dc19fb1e46e621fa0423c1d382d13d1fd22cd5f5d527afe5b9735557cd49813a 12155 tiff_4.7.0-3+deb13u3_i386-buildd.buildinfo
Files:
 687011f258dee2caf02447837eaca15d 512616 libdevel optional libtiff-dev_4.7.0-3+deb13u3_i386.deb
 191ae9fe0aae260587b5b6a5d3dfe7e8 14784 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_i386.deb
 2fbd84226fdc58eb8ee388b321a4fa7e 168788 graphics optional libtiff-opengl_4.7.0-3+deb13u3_i386.deb
 4eca08f116c9da966f0008f6c07c2655 413092 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_i386.deb
 8e19f4a1863402f6cf571a1d9272389c 364740 graphics optional libtiff-tools_4.7.0-3+deb13u3_i386.deb
 b137eb4d9d8310f881403096466c11d0 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_i386.deb
 9494dea7e91b6c2368aa2fd3e02ef38a 449376 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_i386.deb
 1d71beaa2cdb5072282def68e9b50f13 360640 libs optional libtiff6_4.7.0-3+deb13u3_i386.deb
 312c2410cb13a4e9cc4cca6a49f12e99 20492 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_i386.deb
 6458d2f562d71ef1a7ff83765e298221 164800 libs optional libtiffxx6_4.7.0-3+deb13u3_i386.deb
 564205f5ffc9c6caff408e8e598d198a 12155 libs optional tiff_4.7.0-3+deb13u3_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=HdjY
-----END PGP SIGNATURE-----