- poppler (26.07.0-2+rpi1) forky-staging; urgency=medium
++poppler (26.07.0-3+rpi1) forky-staging; urgency=medium
+
+ [changes brought forward from 24.08.0-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Tue, 17 Sep 2024 22:18:17 +0000]
+ * Update symbols file for raspbian.
+
- -- Raspbian forward porter <root@raspbian.org> Sat, 05 Sep 2026 21:25:28 +0000
++ -- Raspbian forward porter <root@raspbian.org> Tue, 13 Oct 2026 01:42:46 +0000
++
+ poppler (26.07.0-3) unstable; urgency=high
+
+ * Team upload
+
+ [ Marc Deslauriers ]
+ * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts
+ - debian/patches/CVE-2026-102620.patch: Fix integer overflow in
+ FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc.
+ - CVE-2026-102620 (Closes: #1149697)
+ * SECURITY UPDATE: overflow in SplashClip::clipToPath
+ - debian/patches/CVE-2026-102621.patch: Fix integer overflow in
+ SplashClip::clipToPath in splash/SplashClip.cc.
+ - CVE-2026-102621 (Closes: #1149698)
+ * SECURITY UPDATE: null pointer deref issue
+ - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in
+ poppler/JBIG2Stream.cc.
+ - CVE-2026-93312
+ * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg
+ - debian/patches/CVE-2026-93313.patch: Fix integer overflow in
+ JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc.
+ - CVE-2026-93313
+ * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID
+ - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve
+ b*12 overflow check in fofi/FoFiTrueType.cc.
+ - CVE-2026-93314 (Closes: #1148266)
+
+ -- Jeremy BĂcha <jbicha@ubuntu.com> Tue, 06 Oct 2026 17:58:35 +0200
poppler (26.07.0-2) unstable; urgency=medium