]> dgit.raspbian.org Git - poppler.git/commitdiff
Merge version 26.07.0-2+rpi1 and 26.07.0-3 to produce 26.07.0-3+rpi1 forky-staging archive/raspbian/26.07.0-3+rpi1 raspbian/26.07.0-3+rpi1
authorRaspbian automatic forward porter <root@raspbian.org>
Tue, 13 Oct 2026 01:42:46 +0000 (02:42 +0100)
committerRaspbian automatic forward porter <root@raspbian.org>
Tue, 13 Oct 2026 01:42:46 +0000 (02:42 +0100)
1  2 
debian/changelog

index dc93dea7d7b8c5c89f88263de2708745ae790293,5c3e6da243c20c6356a9009704183652ceb4080d..2741399449176d9d48a7114aaa262c633ceee1db
@@@ -1,9 -1,30 +1,37 @@@
- poppler (26.07.0-2+rpi1) forky-staging; urgency=medium
++poppler (26.07.0-3+rpi1) forky-staging; urgency=medium
 +
 +  [changes brought forward from 24.08.0-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Tue, 17 Sep 2024 22:18:17 +0000]
 +  * Update symbols file for raspbian.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Sat, 05 Sep 2026 21:25:28 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Tue, 13 Oct 2026 01:42:46 +0000
++
+ poppler (26.07.0-3) unstable; urgency=high
+ 
+   * Team upload
+ 
+   [ Marc Deslauriers ]
+   * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts
+     - debian/patches/CVE-2026-102620.patch: Fix integer overflow in
+       FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc.
+     - CVE-2026-102620 (Closes: #1149697)
+   * SECURITY UPDATE: overflow in SplashClip::clipToPath
+     - debian/patches/CVE-2026-102621.patch: Fix integer overflow in
+       SplashClip::clipToPath in splash/SplashClip.cc.
+     - CVE-2026-102621 (Closes: #1149698)
+   * SECURITY UPDATE: null pointer deref issue
+     - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in
+       poppler/JBIG2Stream.cc.
+     - CVE-2026-93312
+   * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg
+     - debian/patches/CVE-2026-93313.patch: Fix integer overflow in
+       JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc.
+     - CVE-2026-93313
+   * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID
+     - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve
+       b*12 overflow check in fofi/FoFiTrueType.cc.
+     - CVE-2026-93314 (Closes: #1148266)
+ 
+  -- Jeremy BĂ­cha <jbicha@ubuntu.com>  Tue, 06 Oct 2026 17:58:35 +0200
  
  poppler (26.07.0-2) unstable; urgency=medium