poppler (25.03.0-5+deb13u3) trixie-security; urgency=high
authorSalvatore Bonaccorso <carnil@debian.org>
Sat, 6 Jun 2026 09:07:43 +0000 (11:07 +0200)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 6 Jun 2026 09:07:43 +0000 (11:07 +0200)
commitad7c6b0133091c8ef5cd8cfae3a66f33c4a04445
tree64d25a01cb53d201256744ca22044b513b4286b2
parentee339f5018a55eff8b903109662f608c731be59c
parente92a98d14c222476e82e7063f93020015a75c449
poppler (25.03.0-5+deb13u3) trixie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * SplashOutputDev: Fix integer overflow in tilingPatternFill (CVE-2026-10118)
    (Closes: #1138708)
  * Make sure regex doesn't stack overflow by limiting it (CVE-2025-43718)
    (Closes: #1117046)
  * Check for duplicate entries (CVE-2025-52885) (Closes: #1117853)

[dgit import unpatched poppler 25.03.0-5+deb13u3]
46 files changed:
debian/changelog
debian/control
debian/copyright
debian/gbp.conf
debian/gir1.2-poppler-0.18.install
debian/libpoppler-cpp-dev.install
debian/libpoppler-cpp2.install
debian/libpoppler-dev.install
debian/libpoppler-glib-dev.install
debian/libpoppler-glib-doc.install
debian/libpoppler-glib-doc.links
debian/libpoppler-glib8t64.install
debian/libpoppler-glib8t64.symbols.in
debian/libpoppler-private-dev.install
debian/libpoppler-qt5-1t64.install
debian/libpoppler-qt5-1t64.symbols.in
debian/libpoppler-qt5-dev.install
debian/libpoppler-qt6-3t64.install
debian/libpoppler-qt6-3t64.symbols.in
debian/libpoppler-qt6-dev.install
debian/libpoppler147.docs
debian/libpoppler147.install
debian/patches/CVE-2025-32364.patch
debian/patches/CVE-2025-32365.patch
debian/patches/CVE-2025-43903.patch
debian/patches/CVE-2025-50420.patch
debian/patches/CVE-2025-52886.patch
debian/patches/Check-for-duplicate-entries.patch
debian/patches/Make-sure-regex-doesn-t-stack-overflow-by-limiting-i.patch
debian/patches/SplashOutputDev-Fix-integer-overflow-in-tilingPatter.patch
debian/patches/series
debian/poppler-utils.install
debian/rules
debian/source/format
debian/tests/control
debian/tests/cpp
debian/tests/glib
debian/tests/qt5
debian/tests/qt6
debian/tests/test-cpp.cpp
debian/tests/test-glib.c
debian/tests/test-qt5.cpp
debian/tests/test-qt6.cpp
debian/upstream/metadata
debian/upstream/signing-key.asc
debian/watch