Description of the patch:
This update for tiff fixes the following issues:
Update to version 4.7.2.
Security issues fixed:
- CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
- CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value
(bsc#1268434).
Other updates and bugfixes:
- Version 4.7.2:
- Software configuration changes:
- cmake: Fix bundle identifiers to use reverse-DNS format
- cmake: Fix and improve Apple framework build support
- cmake: Use TurboJPEG CONFIG by default (issue #767)
- cmake: changes related to 8-/12-bit modes
- cmake: Replace CMath::CMath with direct link to avoid export.
- Support for iOS-derived builds
- Simplify cmake byte order version check
- Add additional warnings, primarily floating precision conversions and integer arithmetic conversions
- configure.ac: Require bootstrap with at least Autoconf 2.71.
- Library changes:
- New/improved functionalities::
- Add TIFFGetMaxCompressionRatio() and use it in _TIFFReadEncoded[Tile|Strip)AndAllocBuffer() (issue #781)
- Bug fixes:
- Handle negative TIFFReadFile results before state updates (issue #854)
- tif_dirread.c: fix copy-paste bug in ChopUpSingleUncompressedStrip
- tif_read.c: Fixed division by zero in TIFFStartStrip() (issue #777)
- tif_dirwrite.c: add integer overflow checks to allocation size calculations
- tif_print.c: add integer overflow checks to allocation size calculations
- tif_write.c: fix OOB read and underflow in TIFFAppendToStrip copy loop
- DumpModeSeek: add bounds check to prevent OOB pointer advance
- TIFFGrowStrips: fix use-after-free on partial realloc failure.
- Fix NULL dereference in _TIFFReserveLargeEnoughWriteBuffer() by validating the strip bytecount array before
accessing it.
- TIFFRGBAImage: avoid int overflows in put functions (issue...