-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 16:34:09 +0200 Source: tiff Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym Architecture: riscv64 Version: 4.7.0-3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-02) Changed-By: Salvatore Bonaccorso Description: libtiff-dev - Tag Image File Format library (TIFF), development files libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti libtiff6 - Tag Image File Format (TIFF) library libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface Closes: 1141320 Changes: tiff (4.7.0-3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Address heap-based buffer overflow in pixarlog (CVE-2026-12912) (Closes: #1141320) - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 - pixarlog: add comment explaining 4-byte advance in ABGR decode - pixarlog: complete ABGR bounds check for multi-row strip decoding - pixarlog: error out on invalid ABGR output buffer sizes Checksums-Sha1: 726a8e851fdfbdf1756ea850753d938c1b3f144d 766064 libtiff-dev_4.7.0-3+deb13u3_riscv64.deb 3ac6e321eb0dc94934ca77aa02247a79ac196275 15648 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_riscv64.deb 8e1aeaafdd9a4a5364effe3ac8822d4598bd77d0 168276 libtiff-opengl_4.7.0-3+deb13u3_riscv64.deb 0f11e7eb565fe26e2205a5db9933382e0848ea53 438440 libtiff-tools-dbgsym_4.7.0-3+deb13u3_riscv64.deb d0f175b09e4c5023602c775df74e750a14628485 360148 libtiff-tools_4.7.0-3+deb13u3_riscv64.deb 03415d94f485fa2cb757a7fb31fda961e16291e3 160920 libtiff5-dev_4.7.0-3+deb13u3_riscv64.deb 644cdcf9ee56845330bafee0c31725f054de4786 469344 libtiff6-dbgsym_4.7.0-3+deb13u3_riscv64.deb 74613bc6aed75d99205552832f147df313a5df86 342828 libtiff6_4.7.0-3+deb13u3_riscv64.deb 50e5f7ae0dfc868823415e861049142784a90379 20444 libtiffxx6-dbgsym_4.7.0-3+deb13u3_riscv64.deb 8081362b00addf09d3d5562fa747dddc5d2c7073 164112 libtiffxx6_4.7.0-3+deb13u3_riscv64.deb 3bef2c7f3a605ac31cf2ef34926cf17ce7d824fd 12210 tiff_4.7.0-3+deb13u3_riscv64-buildd.buildinfo Checksums-Sha256: 104d92a8e7a5e4e6bd56cae152af719ea7d19dc38a4123695ddbf23b2d84d409 766064 libtiff-dev_4.7.0-3+deb13u3_riscv64.deb c33ac80b54268aa98753859fbf19466ebd15a0a6f879c88eb07181c4b048a694 15648 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_riscv64.deb 57ed1cbba416d02b1b4d604fec2ce5fe9eee73bf1f5a2658f1a2f0b5d19a04d2 168276 libtiff-opengl_4.7.0-3+deb13u3_riscv64.deb 1ed89cc520db2fe812192dac461306f8cd09a36a47d9088e1dd26411ccdbe50d 438440 libtiff-tools-dbgsym_4.7.0-3+deb13u3_riscv64.deb 61d0ca2f044f84fe29b23a73b82ed2be1c3a71603e5d88493496f5ed1c1e4d85 360148 libtiff-tools_4.7.0-3+deb13u3_riscv64.deb e430c0f018a11ab9e12577d6e3c72d24c64d827a2f9acda4036a2d1acba65011 160920 libtiff5-dev_4.7.0-3+deb13u3_riscv64.deb 386e105b0197a62a90cd63b6e82bfbe8f5cb138ae8427ed106bc90d3a19baf58 469344 libtiff6-dbgsym_4.7.0-3+deb13u3_riscv64.deb d5fe2c7d17c8f829609da5c377c7d3892dddb68db8dcbf7922e8fc1b38f783ed 342828 libtiff6_4.7.0-3+deb13u3_riscv64.deb 7d7167c09004e93d62193cdc62da0605809c7fc00812795073e9057c94ea7ba8 20444 libtiffxx6-dbgsym_4.7.0-3+deb13u3_riscv64.deb f6217ff50488ee43e00f1f48eee8bc91a1111b87c2be2a15a90e6904eab785c4 164112 libtiffxx6_4.7.0-3+deb13u3_riscv64.deb 103dd43453aa1f9ef1f2dadbd2f31bce0d5c13ee9626a1b82057396409c4dbf2 12210 tiff_4.7.0-3+deb13u3_riscv64-buildd.buildinfo Files: 42924abd9b05c28cca85c8237f45ccbf 766064 libdevel optional libtiff-dev_4.7.0-3+deb13u3_riscv64.deb 913f9247d65bce7caa7fa23c07ea3369 15648 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_riscv64.deb 6eb0e9bbb7240967209fc999174f61f2 168276 graphics optional libtiff-opengl_4.7.0-3+deb13u3_riscv64.deb 3f1caf5d77327a1886151b346ba46a35 438440 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_riscv64.deb 07bd0432aa74252ae4f84370ae37ade3 360148 graphics optional libtiff-tools_4.7.0-3+deb13u3_riscv64.deb 83a3412e818dc8a883b9e5732ae2474a 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_riscv64.deb 8945cc143579d6393906177ed696e151 469344 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_riscv64.deb 7ace219404df6b5618b052a6d799c53c 342828 libs optional libtiff6_4.7.0-3+deb13u3_riscv64.deb 9ba56ecdbc5d73c0b61a30c6d2aa57a5 20444 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_riscv64.deb cdcfcff8e19ef0286b7a8d18b76bd064 164112 libs optional libtiffxx6_4.7.0-3+deb13u3_riscv64.deb 1096675676cbc5d466fc2fce172d4650 12210 libs optional tiff_4.7.0-3+deb13u3_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmpb7LUACgkQ7SlJcp2g 6OIl2BAAuImrGUK1FUG01J/zqR8iYZJGYpVpnTs9WW97GT+VS+Of3/eyLGxACCy7 NmCP8X6Qr6pJTc7bTeseV6k8xintDRc58WcdtJoJi2EKbuNBTpj95xF0NyvEdTSN /wesky01/eMBuXK6fqkqu/A+FTRYgKJ4YjwiZdm3VAFH60vMfwLER7yy+3eh/s8o TwPI5bmMz5K9TZXbRYDlg8ADBu/HJ7NbNGeTz2LkLpUiaSdHaPws1x4DB2BqQP1g iXCc4xDXAiDpLwq6c+0W3101vsMvSb1ebAb3qPz47Pap+kbTmBz0UJmMgbr5bXRr syVDc0ZfGgj+S2tvIqoU+GQTsXlJ4KeQ87gGxuNaFN3Qd6NHtCTAfSbWp0WoHJKW nMfpU6rrG9WPtkAe6swYZhdZW+zuuvHiMTCh4s0QZaIr8vrryjUXvJ/t7PRD1Rcc BAqSzYhRPEGmEkgtWKat6k4uClLPt9/WLGABdMt5v6faGYSsLZUiyVxGfW6kpMgg h48P8EBMXO2NI8V9+CRQY0o+HuFu+m7BrUhuMiUDKbPqatPOL9PBJJyiTo7CBBZG FYNpQFqudGV55wnYewnzBxEoYQk0PoiE83JVOHHkUKMhI7Q3ASZ4GUHmzpYAM8W8 nn7x2yU5gcO0iKu4dlWXqakZfz2ZJ+2AF9NJASp+IvEAdIKJTNk= =2HSF -----END PGP SIGNATURE-----