-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 12:15:17 +0200 Source: tiff Architecture: source Version: 4.2.0-1+deb11u8 Distribution: bullseye-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: tiff (4.2.0-1+deb11u8) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2026-4775: heap overflow write when processing crafted tiff files. Checksums-Sha1: 56b016795f4174ffc15487fe615be84a0c218b3c 2461 tiff_4.2.0-1+deb11u8.dsc 400ff865beb34499633dd1095fe438995e6da707 2809373 tiff_4.2.0.orig.tar.gz cf80f83c9995a2ca9d1df2deb883a499037ddc51 228 tiff_4.2.0.orig.tar.gz.asc 8bb9d0bec9b1f5c5517d25378a2dfb8fe4f9487a 46492 tiff_4.2.0-1+deb11u8.debian.tar.xz ad98b329326c844b0210e838c07ea5c0c2ce72e6 6780 tiff_4.2.0-1+deb11u8_source.buildinfo Checksums-Sha256: b67095845893a7c469d2bf9e80f4cbf59d266206515c12c8f856788ce4c1ac7e 2461 tiff_4.2.0-1+deb11u8.dsc eb0484e568ead8fa23b513e9b0041df7e327f4ee2d22db5a533929dfc19633cb 2809373 tiff_4.2.0.orig.tar.gz 119bb62934603ff4d3cd81c739d11904b28812a860773b9b2268cc96a339b14f 228 tiff_4.2.0.orig.tar.gz.asc d874fcfc03cf02d85a077b064f55ea06497e6a8be8e2f88a812340e575f559ff 46492 tiff_4.2.0-1+deb11u8.debian.tar.xz 26435d16aeb2e4aab4c6f64b2f96854a9d2c892b139a3cef99de5400541efc8f 6780 tiff_4.2.0-1+deb11u8_source.buildinfo Files: e8e28afd27e80645e09b79e41ac3e145 2461 libs optional tiff_4.2.0-1+deb11u8.dsc 2bbf6db1ddc4a59c89d6986b368fc063 2809373 libs optional tiff_4.2.0.orig.tar.gz 65a996e77123a6215470b7b08f6e41b0 228 libs optional tiff_4.2.0.orig.tar.gz.asc 3c436c33efa395103d4e95ee1613b850 46492 libs optional tiff_4.2.0-1+deb11u8.debian.tar.xz 329e4be65c1acb3d676868828996128f 6780 libs optional tiff_4.2.0-1+deb11u8_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmniGzMACgkQnUbEiOQ2 gwI/7Q//VJp3x0sWOWK4tM7lNScrdBg04+eRSa7ACnKuobTLYgcZGgDuZK0JK4bO Oo7La8E2p+fO3ZD+dXi6emHnmNuS6bDFzmkDvgjcseAY1yHrRJmxMcBEG5PeZa12 PA9vxIzQnD5EEdIhhUCyjUWGJF8pldAq8//8b/l6S7IFYPc5O8jKpiJdf5M4C3N5 XXJTPSA6QQlxG1mjcB1Sw/u+HDTuG9KuzIl6fTeCFCswnKaPeR8IclBFiaUt7qhT sMpKDh9aQe1zLq9P7wBSDfBp3A+kxWVgvBugBs92w8xs4LKjYR+hVtD2v4FSiPq9 xyVJvhiUv2/QmAnbEdTkntes9Sxba7c5iqSAYaYKu2Mi6LQrM4Uo01MQrhRbw1Re JWCRNciZLgGI/UkMbzXjSzU/OKq8Qj8lJaQrwqsxowxdt34OR9fqXRCEp/41yzjS 10yLzoQ1zZs+Sc8snGyK9ThdAcBDyomRvrKpy02NaxNnLWmMWjUBUWtdYvbTc4hb FVVJxWTBicO8aMBs9bZ/bAtf3qM8QbHuFdgFCGyDwdMaZRGh/mklrTjrls8j1Yk0 tt8G5VUgRnwZmEj4d5r5JD3z7x1Ak0RhwDjdTqEBHLC7nWDsDJj75v1oVFDvGLLH QFwyeG15llbDDZqgE0elhjvwZJ+DS72W6kAzrQL8kVVG4bQyIfg= =CuCD -----END PGP SIGNATURE-----