poppler (25.03.0-5) unstable; urgency=high
authorJeremy Bícha <jbicha@ubuntu.com>
Mon, 28 Jul 2025 08:55:12 +0000 (10:55 +0200)
committerJeremy Bícha <jbicha@ubuntu.com>
Mon, 28 Jul 2025 08:55:12 +0000 (10:55 +0200)
commit37708fe5028f41e8ceae0dc349674e7e3b0bfd9f
tree41f247f9b5d6bb302723f3e4546d4fe528fd45c8
parentee339f5018a55eff8b903109662f608c731be59c
parentfa67f871964835c26c52221447ab005912770851
poppler (25.03.0-5) unstable; urgency=high

  [ Marc Deslauriers ]
  * SECURITY UPDATE: DoS via reference count overflow
    - debian/patches/CVE-2025-52886.patch: limit amount of annots per
      document/page in poppler/Annot.cc, poppler/Page.cc.
    - CVE-2025-52886 (Closes: #1108784)

[dgit import unpatched poppler 25.03.0-5]
42 files changed:
debian/changelog
debian/control
debian/copyright
debian/gbp.conf
debian/gir1.2-poppler-0.18.install
debian/libpoppler-cpp-dev.install
debian/libpoppler-cpp2.install
debian/libpoppler-dev.install
debian/libpoppler-glib-dev.install
debian/libpoppler-glib-doc.install
debian/libpoppler-glib-doc.links
debian/libpoppler-glib8t64.install
debian/libpoppler-glib8t64.symbols.in
debian/libpoppler-private-dev.install
debian/libpoppler-qt5-1t64.install
debian/libpoppler-qt5-1t64.symbols.in
debian/libpoppler-qt5-dev.install
debian/libpoppler-qt6-3t64.install
debian/libpoppler-qt6-3t64.symbols.in
debian/libpoppler-qt6-dev.install
debian/libpoppler147.docs
debian/libpoppler147.install
debian/patches/CVE-2025-32364.patch
debian/patches/CVE-2025-32365.patch
debian/patches/CVE-2025-43903.patch
debian/patches/CVE-2025-52886.patch
debian/patches/series
debian/poppler-utils.install
debian/rules
debian/source/format
debian/tests/control
debian/tests/cpp
debian/tests/glib
debian/tests/qt5
debian/tests/qt6
debian/tests/test-cpp.cpp
debian/tests/test-glib.c
debian/tests/test-qt5.cpp
debian/tests/test-qt6.cpp
debian/upstream/metadata
debian/upstream/signing-key.asc
debian/watch