-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 16:34:09 +0200 Source: tiff Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym Architecture: s390x Version: 4.7.0-3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Salvatore Bonaccorso Description: libtiff-dev - Tag Image File Format library (TIFF), development files libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti libtiff6 - Tag Image File Format (TIFF) library libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface Closes: 1141320 Changes: tiff (4.7.0-3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Address heap-based buffer overflow in pixarlog (CVE-2026-12912) (Closes: #1141320) - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 - pixarlog: add comment explaining 4-byte advance in ABGR decode - pixarlog: complete ABGR bounds check for multi-row strip decoding - pixarlog: error out on invalid ABGR output buffer sizes Checksums-Sha1: 6535fbe790a89b603be966572623946e8391c1b7 488800 libtiff-dev_4.7.0-3+deb13u3_s390x.deb e5dfaece56aa3fd4448314cfdffd263a90e88827 15224 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_s390x.deb c80407dc6e331c146c2f71ca1381a2f623e58378 168560 libtiff-opengl_4.7.0-3+deb13u3_s390x.deb 87c0132fae2238963d571d43266f7cdb2a330181 444000 libtiff-tools-dbgsym_4.7.0-3+deb13u3_s390x.deb b9c52cb809f438394c5f226bad27399ba7f95033 363420 libtiff-tools_4.7.0-3+deb13u3_s390x.deb 4d6a02af748a35f0e94d79ea793eb23977d6f3c6 160920 libtiff5-dev_4.7.0-3+deb13u3_s390x.deb a647d3c6cbdfc2ef8553dbd0d515997b9995bc9f 510080 libtiff6-dbgsym_4.7.0-3+deb13u3_s390x.deb 89e321d6bd1abb1573662f47262ffd3d392bebc0 348268 libtiff6_4.7.0-3+deb13u3_s390x.deb f3cbb6e7005c04fe5ed86323288a6b38fa5c320b 21200 libtiffxx6-dbgsym_4.7.0-3+deb13u3_s390x.deb 8ddc5e031b76fc566f3040041e742ad136133a39 164216 libtiffxx6_4.7.0-3+deb13u3_s390x.deb 975ad5fa28ff6660712f3af1e1a7be4704e936c5 12025 tiff_4.7.0-3+deb13u3_s390x-buildd.buildinfo Checksums-Sha256: 2e7fb1db2f168753847e9ba4a66095409e9b875f36efcd9f79afb6fca0dfbdd6 488800 libtiff-dev_4.7.0-3+deb13u3_s390x.deb c3c56d3b810f09a9b6a89059d64532782e13392743c2a8ab9c299041acda2ad6 15224 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_s390x.deb bf6641aa477f82558641692d00923a6c9dc35a5b164a607e8899a25cd21c3616 168560 libtiff-opengl_4.7.0-3+deb13u3_s390x.deb 9ae5ecb21951ff938766586bd6336c2722c0ecb9903430d759fc3750ffbd002d 444000 libtiff-tools-dbgsym_4.7.0-3+deb13u3_s390x.deb a9794a7b4c17ce843d4928320a6b38ecf2b435d401938978edff91ebab060c0d 363420 libtiff-tools_4.7.0-3+deb13u3_s390x.deb ac327fbe6421fce5548df8557a3a0c744e3bb1d2cacc0d0d461e3c976f2f2f6e 160920 libtiff5-dev_4.7.0-3+deb13u3_s390x.deb 29e7a8309195d96037e191e65e3def831bf3ed0c0f3d42c9d62d4c0672671114 510080 libtiff6-dbgsym_4.7.0-3+deb13u3_s390x.deb cd166c0f4c740009b6f679fc6c2ce02033175583ed5789f7f29ecae30762a440 348268 libtiff6_4.7.0-3+deb13u3_s390x.deb 8e32b2261da5d6b3024ade311ed3fac435c4b5a8cfbe7c672a6198c7b3d999b7 21200 libtiffxx6-dbgsym_4.7.0-3+deb13u3_s390x.deb eccd7bd657e71e5f8766a14e15d8301ebba6e4a9eacad8ee8d0756cdd6de64a4 164216 libtiffxx6_4.7.0-3+deb13u3_s390x.deb 3ede8267baffa391520e8a092e10c7e5521efcbea5b5416ec46b3f88036f6e27 12025 tiff_4.7.0-3+deb13u3_s390x-buildd.buildinfo Files: f3269b04dc5bc4072262daad90e2619b 488800 libdevel optional libtiff-dev_4.7.0-3+deb13u3_s390x.deb 25bbc76e1ad90d1b83294a99015c892c 15224 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_s390x.deb c009248fd7ebca32edf90e06b75636d0 168560 graphics optional libtiff-opengl_4.7.0-3+deb13u3_s390x.deb 26d60d8ddbc176e10d27799c7bcffc27 444000 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_s390x.deb fa432135667ad41589f03c316cc3786f 363420 graphics optional libtiff-tools_4.7.0-3+deb13u3_s390x.deb 4008b23b55e4f5ee2856be6961ab0434 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_s390x.deb 3c3422f6087f55f4c65bdf2af0215639 510080 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_s390x.deb a63b278b4ef211788ebfc1ff6538141a 348268 libs optional libtiff6_4.7.0-3+deb13u3_s390x.deb db6327655543e3c3c0aae6f1ad3a83e1 21200 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_s390x.deb 2ef82e45422f2bcdfb5d860203ba54ca 164216 libs optional libtiffxx6_4.7.0-3+deb13u3_s390x.deb aaca048c9d53b5c743d86c34262282f7 12025 libs optional tiff_4.7.0-3+deb13u3_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmpb6UkACgkQkaCrxAR3 BY0SNA//fKVzs/zJtUzl60WUtYi2Xv0+WHX1wwKFPqN86Bp9KkZySsXqnAhul/P7 Tmym90LRO090UZGkTLh7oPf1V+2Xw+7FguaXCMfs5fLd8PiNF0KxWi0R3S9u9peU OjWtf3fj56mcY9tSYi8RfcBdCHejBXYkX2ySAfyC6rpn7fRs7n5y4ZMZWTFdURJm WXlYoVXu8hyKKcPR8nqvwXSg3iRdZVVFOKAvee9AnWuXzOd5jdhSmtYQ/06QWuxv 4dnEc4XYNrHPTl46d7pUAEdIlWo+4k9S1rxXULMNaElSomhBAHWHYLUj5DCAQH97 BQ1xeH2tq8P7/9RKMLFeJuy41JhS6UdvF61UfS6a4eLAR61VEIN3GR4F468wzKCE t2qwjvtF27qTjM4pmAAwJtYnQO1w+vOZxV6QtTBR8N7XP56MgZAylBHTikUH/e6H b5o310xtUUaOY7fYCH9A+g3bcnz664lrcbR1KAQRl5b78gQeo2aekOOSdFzep00d tc26Li/jmn3hy0EQMfOFQmv8lQoB33ysWkR2tXna8rxgAeWoOizRmYiM+Hnsx6np HlPuXnyFV4QSQfrPK1/I990EDq8utb6wN72IS0XTHeruUrPsglw3Q4Fqlg4pXTBk 2Yc035bQ8PXM9aD0nLetdmPb28NIwPxfZJGKpgN6MnYC7I9xeDw= =qce6 -----END PGP SIGNATURE-----