poppler (26.07.0-3) unstable; urgency=high

poppler (26.07.0-3) unstable; urgency=high

  * Team upload

  [ Marc Deslauriers ]
  * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts
    - debian/patches/CVE-2026-102620.patch: Fix integer overflow in
      FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc.
    - CVE-2026-102620 (Closes: #1149697)
  * SECURITY UPDATE: overflow in SplashClip::clipToPath
    - debian/patches/CVE-2026-102621.patch: Fix integer overflow in
      SplashClip::clipToPath in splash/SplashClip.cc.
    - CVE-2026-102621 (Closes: #1149698)
  * SECURITY UPDATE: null pointer deref issue
    - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in
      poppler/JBIG2Stream.cc.
    - CVE-2026-93312
  * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg
    - debian/patches/CVE-2026-93313.patch: Fix integer overflow in
      JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc.
    - CVE-2026-93313
  * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID
    - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve
      b*12 overflow check in fofi/FoFiTrueType.cc.
    - CVE-2026-93314 (Closes: #1148266)

[dgit import unpatched poppler 26.07.0-3]