-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 16:34:09 +0200
Source: tiff
Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym
Architecture: armel
Version: 4.7.0-3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libtiff-dev - Tag Image File Format library (TIFF), development files
 libtiff-opengl - TIFF manipulation and conversion tools
 libtiff-tools - TIFF manipulation and conversion tools
 libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti
 libtiff6   - Tag Image File Format (TIFF) library
 libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 1141320
Changes:
 tiff (4.7.0-3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address heap-based buffer overflow in pixarlog (CVE-2026-12912)
     (Closes: #1141320)
     - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3
     - pixarlog: add comment explaining 4-byte advance in ABGR decode
     - pixarlog: complete ABGR bounds check for multi-row strip decoding
     - pixarlog: error out on invalid ABGR output buffer sizes
Checksums-Sha1:
 389ffdb7a60e0ea1dee21764bcfe3254c170dc3a 463084 libtiff-dev_4.7.0-3+deb13u3_armel.deb
 7092813169a2d25e01963d1d00359b0e3b955a08 16456 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armel.deb
 66023721bc1a600153b4d3af971bb65bf8c7816b 170268 libtiff-opengl_4.7.0-3+deb13u3_armel.deb
 13bcc7f097fa5943fd04a270cae8617b7e95b2d6 439472 libtiff-tools-dbgsym_4.7.0-3+deb13u3_armel.deb
 6bf6d027f429f50401f894d1ec196819ea992f1d 350708 libtiff-tools_4.7.0-3+deb13u3_armel.deb
 208ed88c3ff44d7f5af03d0d546b6b7d274926df 160920 libtiff5-dev_4.7.0-3+deb13u3_armel.deb
 9e1325c61cc0b08ad38e7ab70326cb40d412545b 491628 libtiff6-dbgsym_4.7.0-3+deb13u3_armel.deb
 09cbed7178a1d7415e1d25aa2a727a13113eae35 322316 libtiff6_4.7.0-3+deb13u3_armel.deb
 24c1c8e0f62a7ccacb4fcdb2bea42022e3515ec2 21668 libtiffxx6-dbgsym_4.7.0-3+deb13u3_armel.deb
 45fcbaab949f19696d974a98e7db28a3e053b6bf 164272 libtiffxx6_4.7.0-3+deb13u3_armel.deb
 27ebb8dd1346921e0546ead3b96f88547b6a5180 12070 tiff_4.7.0-3+deb13u3_armel-buildd.buildinfo
Checksums-Sha256:
 8971016f5ee88e0b812342bff315d2d2eef4f446a2a5281779e34901f35811f1 463084 libtiff-dev_4.7.0-3+deb13u3_armel.deb
 479d594b9e1a9a20a43bc70715cc6c7cc48b05a0cbd2fed63f3e3469c52d258c 16456 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armel.deb
 6b4275dd843059aa5023dee1adc71c0ebd215c6424c5d25de8accba3f6031af0 170268 libtiff-opengl_4.7.0-3+deb13u3_armel.deb
 1ad64a93faca948dc4afca1af2662d3e7a48b5d61a03bd523a7df520a2be44f3 439472 libtiff-tools-dbgsym_4.7.0-3+deb13u3_armel.deb
 9c649dd62df51ce8d185297a055ff82a8ad683986940de40df569e1ae8e51e25 350708 libtiff-tools_4.7.0-3+deb13u3_armel.deb
 30da904061fdaf36f532ccbdf1a6899b989c04930180d6b403d196fb7b78baa2 160920 libtiff5-dev_4.7.0-3+deb13u3_armel.deb
 788acd77545f34ee87ff6900b01b07f42ca1e7e4b0afde02d5bc54e0c1d5d7ec 491628 libtiff6-dbgsym_4.7.0-3+deb13u3_armel.deb
 ce6616a70d60a6eb872819b909b3cf57ae3d15b9a903ecbad5bf901127a684f0 322316 libtiff6_4.7.0-3+deb13u3_armel.deb
 630d60df65f04432c2f915b2af12e9443d26cf72901c53738947318a3b5d3e6b 21668 libtiffxx6-dbgsym_4.7.0-3+deb13u3_armel.deb
 ae6df77896b1da75f05c46d5edf5bd518574cee202f45a96496b08dbcdb2b9b7 164272 libtiffxx6_4.7.0-3+deb13u3_armel.deb
 6a1469e33f77d7ca8fc92f0c0f449fddedc517fbf4cc101476edf13b7e617d41 12070 tiff_4.7.0-3+deb13u3_armel-buildd.buildinfo
Files:
 38440c4e07e2cd3fa49b4d678b5fb27f 463084 libdevel optional libtiff-dev_4.7.0-3+deb13u3_armel.deb
 40df6f34cbe8a1d7d718e6ecfe883fea 16456 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_armel.deb
 cb15747e0b856cf4c1ff13629eddd7bb 170268 graphics optional libtiff-opengl_4.7.0-3+deb13u3_armel.deb
 aaf481f182033b6ec0c700141294fa8f 439472 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_armel.deb
 19f8d1f668951c6e8b4ff03a22e5ce40 350708 graphics optional libtiff-tools_4.7.0-3+deb13u3_armel.deb
 0f58b51f933998e1f05874027dc66916 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_armel.deb
 ca1ab7d073ad8e1f828660ee14bc1206 491628 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_armel.deb
 233a6ba157bef873732dc240cf7cd31d 322316 libs optional libtiff6_4.7.0-3+deb13u3_armel.deb
 e079487f524e44bfa65f078f481ba1a6 21668 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_armel.deb
 bdafbec19b55fbeddc220b3ca5e51f9e 164272 libs optional libtiffxx6_4.7.0-3+deb13u3_armel.deb
 e15675a7146f0e8e75ae10e9487ab9d2 12070 libs optional tiff_4.7.0-3+deb13u3_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmpb6gQACgkQK1PZBedP
sprt4BAAnG90GbYY5X7pXlQ8RC5rZmjBTPLOTC5pjKnVd1HBBq7mVNPYKs01wjNM
oddcLcPa+zh8rA6w9FZSGS+gFuV0P9qXCuWgbCM9tfNLl5oY3JQ5F1vH/XzdB63a
SJC6zd+UJa4f7I1ebI630zcmSXLgUHEkUW0R1CxBa8mGLFz1BQBx9iTBjMkiAg3W
XlW6bMChYz9Wy6PaATzPjwuGRBvIWX8tZa72h2YPXo5W3ghn5yXd2ygSMcLGa3Vc
Hho4wPvceGcwhXTKemZ0dNzBPJogD/DiCicnwMUuw1hpm8fGFEQ8Y99DGOu9qxpc
6o7q01uX2DBCbKW2PHGj20/12Bqv+YN7J/nJGyr52WmeeyMEcliQUERCI/hEi+nW
tvKGnQsw+eBT0X3GpECTtTDrxebXKgR1GbrwIKA9AACaC3+04zHG4ulfCHqFX3PN
nzZBeTgQR1VF1BqjMXPoBkXpOU0FZz9P1M9vEE9UWnf76jiaC9gnSNgiUzQRPWZc
M2lBE/+a/nLbpAgQT70DRuAd69RxnnH4Sokz9g/1AO1uZjkJk1YnQ9acRpUc2jE6
cGv44wkB1EzHKY7j3iqdG/vrZUrBsXeggX7mDC3q8Umj/VExtzTBu+MwwGsnZtR0
N3jiFLziD/tYks1eXk6OkXbTQL5/2o15E0RcN8FHb+I6y7TZkuE=
=yQ6v
-----END PGP SIGNATURE-----