Debian Package Tracker
Register | Log in
Subscribe

tiff

Choose email to subscribe with

general
  • source: tiff (main)
  • version: 4.7.1-1
  • maintainer: Laszlo Boszormenyi (GCS) (DMD)
  • arch: all any
  • std-ver: 4.7.2
  • VCS: unknown
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 4.2.0-1+deb11u5
  • o-o-sec: 4.2.0-1+deb11u6
  • oldstable: 4.5.0-6+deb12u2
  • old-sec: 4.5.0-6+deb12u1
  • stable: 4.7.0-3
  • testing: 4.7.0-5
  • unstable: 4.7.1-1
versioned links
  • 4.2.0-1+deb11u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.2.0-1+deb11u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.5.0-6+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.5.0-6+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.7.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.7.0-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.7.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libtiff-dev (1 bugs: 0, 0, 1, 0)
  • libtiff-doc
  • libtiff-opengl (1 bugs: 0, 1, 0, 0)
  • libtiff-tools (13 bugs: 0, 10, 3, 0)
  • libtiff5-dev (1 bugs: 0, 1, 0, 0)
  • libtiff6
  • libtiffxx6
action needed
3 bugs tagged patch in the BTS normal
The BTS contains patches fixing 3 bugs, consider including or untagging them.
Created: 2025-01-06 Last update: 2025-09-22 07:01
lintian reports 8 warnings normal
Lintian reports 8 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2025-09-22 Last update: 2025-09-22 06:03
1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:
  • CVE-2024-13978: (needs triaging) A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-08-15 Last update: 2025-09-22 07:30
3 low-priority security issues in bookworm low

There are 3 open security issues in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2024-13978: (needs triaging) A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.

You can find information about how to handle this issue in the security team's documentation.

2 ignored issues:
  • CVE-2023-6277: An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
  • CVE-2023-52355: An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Created: 2023-06-20 Last update: 2025-09-22 07:30
testing migrations
  • excuses:
    • Migration status for tiff (4.7.0-5 to 4.7.1-1): Waiting for test results or another package, or too young (no action required now - check later)
    • Issues preventing migration:
    • ∙ ∙ autopkgtest for beads/1.1.22-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for bornagain/23.0-4: amd64: Pass, arm64: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for chafa/1.14.5-1: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for cmake/4.1.1+really3.31.6-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered (failure will be ignored), riscv64: Test triggered (failure will be ignored), s390x: Pass
    • ∙ ∙ autopkgtest for cups/2.4.10-4: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for dcmtk/3.6.9-5: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for evince/48.1-4: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for fim/0.7.1-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for freeimage/3.18.0+ds2-11: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gdk-pixbuf/2.42.12+dfsg-5: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gegl/1:0.4.62-3: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for ghostscript/10.05.1~dfsg-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gimp/3.0.4-6: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for gle-graphics/4.3.6-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gnudatalanguage/1.1.1-2: amd64: Pass, arm64: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gnustep-gui/0.32.0-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gr-framework/0.73.14+dfsg-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gscan2pdf/2.13.4-4: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for gtk4/4.20.1+ds-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for hugin/2024.0.1+dfsg-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for imagemagick/8:7.1.2.3+dfsg1-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for img2pdf/0.6.1-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libalien-sdl-perl/1.446-4: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libcamera/0.5.2-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libcupsfilters/2.0.0-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libextractor/1:1.13-8: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libgd2/2.3.3-13: amd64: Failed (not a regression) ♻ (reference ♻), arm64: Failed (not a regression) ♻ (reference ♻), i386: Failed (not a regression) ♻ (reference ♻), ppc64el: Test triggered, riscv64: Failed (not a regression) ♻ (reference ♻), s390x: Failed (not a regression) ♻ (reference ♻)
    • ∙ ∙ autopkgtest for libgeotiff/1.7.4-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libgraphics-tiff-perl/21-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libheif/1.20.2-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libimager-perl/1.027+dfsg-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libreoffice/4:25.8.1-1: amd64: Pass, arm64: Test triggered (failure will be ignored), i386: Test triggered (failure will be ignored), ppc64el: Test triggered (failure will be ignored), riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for libsdl2-image/2.8.8+dfsg-1: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for libsdl3-image/3.2.4+ds-1: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for openslide/3.4.1+dfsg-7: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for orthanc-wsi/3.2+dfsg-7: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for pagetools/0.1-3.1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for papers/48.5-1: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for pillow/11.3.0-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for poppler/25.03.0-9: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for pylibtiff/0.6.1-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for r-cran-ragg/1.3.3-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for r-cran-tiff/0.1-12-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for sdl-image1.2/1.2.12-14: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ autopkgtest for simage/1.8.4+ds-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for stiff/2.4.0-7: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for ufo-filters/0.17.0.76.g691aa0e+dfsg1-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for vtk9/9.3.0+dfsg1-7: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for wxwidgets3.2/3.2.8+dfsg-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for xfig/1:3.2.9a-4: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ autopkgtest for xplanet/1.3.1-5: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Pass
    • ∙ ∙ Too young, only 1 of 5 days old
    • Additional info:
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/t/tiff.html
    • ∙ ∙ Waiting for reproducibility test results on amd64 - info ♻
    • ∙ ∙ Waiting for reproducibility test results on arm64 - info ♻
    • Not considered
news
[rss feed]
  • [2025-09-21] Accepted tiff 4.7.1-1 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-09-14] tiff 4.7.0-5 MIGRATED to testing (Debian testing watch)
  • [2025-09-10] Accepted tiff 4.7.0-5 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-08-26] tiff 4.7.0-4 MIGRATED to testing (Debian testing watch)
  • [2025-08-24] Accepted tiff 4.7.0-4 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-04-10] tiff 4.7.0-3 MIGRATED to testing (Debian testing watch)
  • [2025-04-05] Accepted tiff 4.7.0-3 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-04-02] tiff 4.7.0-2 MIGRATED to testing (Debian testing watch)
  • [2025-03-28] Accepted tiff 4.7.0-2 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-03-27] Accepted tiff 4.7.0-1 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2025-01-20] Accepted tiff 4.2.0-1+deb11u6 (source) into oldstable-security (Adrian Bunk)
  • [2025-01-03] Accepted tiff 4.5.0-6+deb12u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2024-08-18] tiff 4.5.1+git230720-5 MIGRATED to testing (Debian testing watch)
  • [2024-08-15] Accepted tiff 4.5.1+git230720-5 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2024-03-11] Accepted tiff 4.1.0+git191117-2~deb10u9 (source) into oldoldstable (Abhijith PA)
  • [2024-01-31] tiff 4.5.1+git230720-4 MIGRATED to testing (Debian testing watch)
  • [2024-01-27] Accepted tiff 4.5.1+git230720-4 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-12-13] Accepted tiff 4.2.0-1+deb11u5 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Aron Xu)
  • [2023-12-10] tiff 4.5.1+git230720-3 MIGRATED to testing (Debian testing watch)
  • [2023-12-03] Accepted tiff 4.5.1+git230720-3 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-11-29] Accepted tiff 4.5.0-6+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Aron Xu)
  • [2023-11-27] Accepted tiff 4.5.0-6+deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Aron Xu)
  • [2023-11-27] Accepted tiff 4.2.0-1+deb11u5 (source) into oldstable-security (Debian FTP Masters) (signed by: Aron Xu)
  • [2023-11-26] Accepted tiff 4.6.0-2 (source) into experimental (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-11-26] Accepted tiff 4.5.1+git230720-2 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-09-14] Accepted tiff 4.6.0-1 (source) into experimental (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-08-04] tiff 4.5.1+git230720-1 MIGRATED to testing (Debian testing watch)
  • [2023-07-31] Accepted tiff 4.1.0+git191117-2~deb10u8 (source) into oldoldstable (Adrian Bunk)
  • [2023-07-30] Accepted tiff 4.5.1+git230720-1 (source) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
  • [2023-06-27] tiff 4.5.1-1 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 25
  • RC: 0
  • I&N: 18
  • M&W: 6
  • F&P: 1
  • patch: 3
links
  • homepage
  • lintian (0, 8)
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 4.7.0-3ubuntu2
  • 25 bugs
  • patches for 4.7.0-3ubuntu2

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing