poppler (25.03.0-4) unstable; urgency=high
authorJeremy Bícha <jbicha@ubuntu.com>
Fri, 18 Apr 2025 22:16:32 +0000 (18:16 -0400)
committerJeremy Bícha <jbicha@ubuntu.com>
Fri, 18 Apr 2025 22:16:32 +0000 (18:16 -0400)
commitb3857f075847ad16616202abf9d98132137872a7
tree250abc66404b789da1462190d6ccf8f09873434a
parentee339f5018a55eff8b903109662f608c731be59c
parent916913a697c7d00932e748ffc9c790f92d971dc4
poppler (25.03.0-4) unstable; urgency=high

  * Team upload
  * SECURITY UPDATE: Properly verify abde.pkcs7.sha1 signatures
    - Cherry-pick upstream fix for the
      NSSSignatureVerification::validateSignature function
      in NSSCryptoSignBackend.cc
    - CVE-2025-43903 (Closes: #1103545)

[dgit import unpatched poppler 25.03.0-4]
41 files changed:
debian/changelog
debian/control
debian/copyright
debian/gbp.conf
debian/gir1.2-poppler-0.18.install
debian/libpoppler-cpp-dev.install
debian/libpoppler-cpp2.install
debian/libpoppler-dev.install
debian/libpoppler-glib-dev.install
debian/libpoppler-glib-doc.install
debian/libpoppler-glib-doc.links
debian/libpoppler-glib8t64.install
debian/libpoppler-glib8t64.symbols.in
debian/libpoppler-private-dev.install
debian/libpoppler-qt5-1t64.install
debian/libpoppler-qt5-1t64.symbols.in
debian/libpoppler-qt5-dev.install
debian/libpoppler-qt6-3t64.install
debian/libpoppler-qt6-3t64.symbols.in
debian/libpoppler-qt6-dev.install
debian/libpoppler147.docs
debian/libpoppler147.install
debian/patches/CVE-2025-32364.patch
debian/patches/CVE-2025-32365.patch
debian/patches/CVE-2025-43903.patch
debian/patches/series
debian/poppler-utils.install
debian/rules
debian/source/format
debian/tests/control
debian/tests/cpp
debian/tests/glib
debian/tests/qt5
debian/tests/qt6
debian/tests/test-cpp.cpp
debian/tests/test-glib.c
debian/tests/test-qt5.cpp
debian/tests/test-qt6.cpp
debian/upstream/metadata
debian/upstream/signing-key.asc
debian/watch