-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 16:34:09 +0200 Source: tiff Binary: libtiff-dev libtiff-opengl libtiff-opengl-dbgsym libtiff-tools libtiff-tools-dbgsym libtiff5-dev libtiff6 libtiff6-dbgsym libtiffxx6 libtiffxx6-dbgsym Architecture: ppc64el Version: 4.7.0-3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Salvatore Bonaccorso Description: libtiff-dev - Tag Image File Format library (TIFF), development files libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5-dev - Tag Image File Format library (TIFF), development files (transiti libtiff6 - Tag Image File Format (TIFF) library libtiffxx6 - Tag Image File Format (TIFF) library -- C++ interface Closes: 1141320 Changes: tiff (4.7.0-3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Address heap-based buffer overflow in pixarlog (CVE-2026-12912) (Closes: #1141320) - pixarlog: fix heap-buffer-overflow in 8BITABGR decode with stride 3 - pixarlog: add comment explaining 4-byte advance in ABGR decode - pixarlog: complete ABGR bounds check for multi-row strip decoding - pixarlog: error out on invalid ABGR output buffer sizes Checksums-Sha1: bb0955352dfff930cf95ccc464e67487ea6b2f93 505712 libtiff-dev_4.7.0-3+deb13u3_ppc64el.deb f9ce7252c3e9e09be6d96105e6d8d603c326cd4f 16140 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 137ba5cb778f723be8551800f01a9a9f6a0d688a 169472 libtiff-opengl_4.7.0-3+deb13u3_ppc64el.deb 760d25e25943ba1506124efb6bfc2a2f3bbd9c80 440904 libtiff-tools-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 112e4326b1da17a555f36789643e2108bf5861df 367856 libtiff-tools_4.7.0-3+deb13u3_ppc64el.deb f2807960ba25dab51dd4ca97439b660111b0722f 160920 libtiff5-dev_4.7.0-3+deb13u3_ppc64el.deb b7b6a809035c41d42e9427e333ecc29e1dd08510 508408 libtiff6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 55bc82f33e2e233d7507f61436cd5428fac3dc2a 354932 libtiff6_4.7.0-3+deb13u3_ppc64el.deb 5dfc86818f543218aef930063882cfbc7040d5c5 21752 libtiffxx6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb d5b7e88359e08ee4f61f0097aa890cd915025cc5 164528 libtiffxx6_4.7.0-3+deb13u3_ppc64el.deb 5a3e2e6e832bf558b255a62ba56eb2cb4cd33f4a 12265 tiff_4.7.0-3+deb13u3_ppc64el-buildd.buildinfo Checksums-Sha256: 32f24f03bce1c7b6d0afa3621f040d5f94eb482e923e538c779c5ee8ef4cee8a 505712 libtiff-dev_4.7.0-3+deb13u3_ppc64el.deb 4bf83c7eecfc76e65328495d2da6e8b2fd02ce76e42c3d8a9e3642391e5dea35 16140 libtiff-opengl-dbgsym_4.7.0-3+deb13u3_ppc64el.deb e555946167f46019fcdbf30dd40b97eaf62e6b897d47a06cad97f5254deb833b 169472 libtiff-opengl_4.7.0-3+deb13u3_ppc64el.deb 54c506fa54b98f014e48853bcb6b1210cd32fca7f2d97ffab4f61b29093c002e 440904 libtiff-tools-dbgsym_4.7.0-3+deb13u3_ppc64el.deb e7abf3ec52db3a0dd4ba9d6c75f5e6eb63eba8f33cedc52b09193cdcdbecdc97 367856 libtiff-tools_4.7.0-3+deb13u3_ppc64el.deb 2afb3c3b559ab99029ae12d770d1ef79c2bd928db923d2b82cd7085749655518 160920 libtiff5-dev_4.7.0-3+deb13u3_ppc64el.deb 8f0de7bc346d63f37d15f2c49a012cb139134a5c1b816577c0f6ae147f46b07e 508408 libtiff6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 67a58378e9d0481ad14d58368bcfd06cf2bc007db08ff930645d8af2a6ce0560 354932 libtiff6_4.7.0-3+deb13u3_ppc64el.deb 6b4908ab9126149708b8b3bce7caca61d824a0ef6ca4b88e371239c764434564 21752 libtiffxx6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb dd1e49b4de536e8fa5d670c3932964fb7edab21de61c30af8f7127f980e81106 164528 libtiffxx6_4.7.0-3+deb13u3_ppc64el.deb 491c77610579b52fb7ca5e1271b7cd44162eb7f6ed455a50cd2ce2d61fddc310 12265 tiff_4.7.0-3+deb13u3_ppc64el-buildd.buildinfo Files: fe23588e9191d278cb0499f7d33248af 505712 libdevel optional libtiff-dev_4.7.0-3+deb13u3_ppc64el.deb fcb1ada42e64dfdd7e5efd0fbf8ea7a0 16140 debug optional libtiff-opengl-dbgsym_4.7.0-3+deb13u3_ppc64el.deb acf2b88fdbfa4c8f08419dfa9ba0d0ac 169472 graphics optional libtiff-opengl_4.7.0-3+deb13u3_ppc64el.deb a57ff13fc7c5a414e6f437ac5224dd6c 440904 debug optional libtiff-tools-dbgsym_4.7.0-3+deb13u3_ppc64el.deb e77396d47d7939c363bf959e22217728 367856 graphics optional libtiff-tools_4.7.0-3+deb13u3_ppc64el.deb 4aa1ca963d68d1e4e16436296c6a8513 160920 oldlibs optional libtiff5-dev_4.7.0-3+deb13u3_ppc64el.deb c39cfbeb6baeb4dde26f51d7c1c2f28e 508408 debug optional libtiff6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 0cf50e5543c1e4055ea67d90588dd711 354932 libs optional libtiff6_4.7.0-3+deb13u3_ppc64el.deb fa6e198bfd6f6703ba9d5cd0c6822f2e 21752 debug optional libtiffxx6-dbgsym_4.7.0-3+deb13u3_ppc64el.deb 4b5fa992bfef963af8c7abaff4ee48ec 164528 libs optional libtiffxx6_4.7.0-3+deb13u3_ppc64el.deb bc7ef36f7cdaad9124affad2a720ae0b 12265 libs optional tiff_4.7.0-3+deb13u3_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmpb6bYACgkQNINNphgy m2QRwBAAzjWrFmR8pUS2N0tynwST8DUnSULN299vfgtN9YLDQQ9ZFxFQ3/VZ8sqm QDCS36lxSKj8Ad1ijQ/JY6eXASrbvhJHAw9r488yAgXBG5AJuD20zp5ETVFF40Ja 6vbYK6Hnrl4PpSQNALkKvLuskk7CbxIqC8FXItGDbia2JFzigcxr02ORAEKax4jq EkvkK/U6KfWa2Kmnx4ek9SJIb/Qc0PRsOdttDYRS2naXfnegZFwWkg1gch65y0SP AXd2q1z7mHNuri5T69/3w2ly5a2Q4lcnKVlwJzxpJ/LlWE6ZwSy3Iz7p/ILI0NaI CtpjJBfNRf3h/m/viXMhWwRs5Wfu4naKGkC+/W9NPcG/JKfOZPonp8agEsgO0Sxk oWmzKboXRke3pTOnuCWgtT69ZQoSBQa7uSNZbk2+arUJWV+jU9N9AcnSML7v8nUq O1+F68M/lZtXaRjqNgViaWJI+w5pCU6XH9OQo481g4v9CrJmQzQCNOxGb1szmkjd 15YjgByHT1881j5yYvh592IsBKEfDAZJhimnwV4NrXTlgj1xocbeWEjnrr+7BtmH zL9oDHHJ7wUlIlOIjayTs/tylK1p4HOT/7lXSvtagaS9cYY1T7yp1oH+tJkS/wVk M2Vp119M2j5ieR3nu5kV+04w2FHHjKoUeaQvxU40qfli2bZr6Z0= =K0kj -----END PGP SIGNATURE-----