On 2026/04/14 18:02, Christian Weisgerber wrote:
> Grab upstream fixes for integer overflows that lead to heap overflows.
> One is a fix for CVE-2026-4775.  While looking over the commit history,
> I also noticed another fix that looked worthwhile.  This is a game
> of whack-a-mole ...
> 
> OK?

yes.

when checking commits for those I noticed
https://gitlab.com/libtiff/libtiff/-/commit/200e5ca51e477ac439ef9514c3c3ac8c9799a5c8
which would be worth grabbing too, I think - I'll prepare a diff.