From: Raspbian automatic forward porter Date: Tue, 13 Oct 2026 01:42:46 +0000 (+0100) Subject: Merge version 26.07.0-2+rpi1 and 26.07.0-3 to produce 26.07.0-3+rpi1 X-Git-Tag: archive/raspbian/26.07.0-3+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=d0635be5ef2895426076a046ae550ca518af0be0;p=poppler.git Merge version 26.07.0-2+rpi1 and 26.07.0-3 to produce 26.07.0-3+rpi1 --- d0635be5ef2895426076a046ae550ca518af0be0 diff --cc debian/changelog index dc93dea,5c3e6da..2741399 --- a/debian/changelog +++ b/debian/changelog @@@ -1,9 -1,30 +1,37 @@@ - poppler (26.07.0-2+rpi1) forky-staging; urgency=medium ++poppler (26.07.0-3+rpi1) forky-staging; urgency=medium + + [changes brought forward from 24.08.0-2+rpi1 by Peter Michael Green at Tue, 17 Sep 2024 22:18:17 +0000] + * Update symbols file for raspbian. + - -- Raspbian forward porter Sat, 05 Sep 2026 21:25:28 +0000 ++ -- Raspbian forward porter Tue, 13 Oct 2026 01:42:46 +0000 ++ + poppler (26.07.0-3) unstable; urgency=high + + * Team upload + + [ Marc Deslauriers ] + * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts + - debian/patches/CVE-2026-102620.patch: Fix integer overflow in + FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc. + - CVE-2026-102620 (Closes: #1149697) + * SECURITY UPDATE: overflow in SplashClip::clipToPath + - debian/patches/CVE-2026-102621.patch: Fix integer overflow in + SplashClip::clipToPath in splash/SplashClip.cc. + - CVE-2026-102621 (Closes: #1149698) + * SECURITY UPDATE: null pointer deref issue + - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in + poppler/JBIG2Stream.cc. + - CVE-2026-93312 + * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg + - debian/patches/CVE-2026-93313.patch: Fix integer overflow in + JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc. + - CVE-2026-93313 + * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID + - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve + b*12 overflow check in fofi/FoFiTrueType.cc. + - CVE-2026-93314 (Closes: #1148266) + + -- Jeremy Bícha Tue, 06 Oct 2026 17:58:35 +0200 poppler (26.07.0-2) unstable; urgency=medium