[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted poppler 25.03.0-5 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 28 Jul 2025 10:55:12 +0200
Source: poppler
Built-For-Profiles: noudeb
Architecture: source
Version: 25.03.0-5
Distribution: unstable
Urgency: high
Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Closes: 1108784
Changes:
 poppler (25.03.0-5) unstable; urgency=high
 .
   [ Marc Deslauriers ]
   * SECURITY UPDATE: DoS via reference count overflow
     - debian/patches/CVE-2025-52886.patch: limit amount of annots per
       document/page in poppler/Annot.cc, poppler/Page.cc.
     - CVE-2025-52886 (Closes: #1108784)
Checksums-Sha1:
 c66e197423a14d1127b29d6bf0e721f7bacee9f6 3934 poppler_25.03.0-5.dsc
 272b255669bd46975c06d3bacc9bb7f5dca74fd6 42088 poppler_25.03.0-5.debian.tar.xz
 bbbac17efa145776f509e72f8a77e43bd4a257b8 17065 poppler_25.03.0-5_source.buildinfo
Checksums-Sha256:
 a97af74e39bd6731d2017402176a5241edc01badb2203dd79ee3adc0ab93bd15 3934 poppler_25.03.0-5.dsc
 8f7dddaee9a2f61480c4dfae6923f06749f0ab98d24203363fac4841d2237953 42088 poppler_25.03.0-5.debian.tar.xz
 5e19e85966171850e2f2d816297283177b7e29a36f52bff665afcd1098067642 17065 poppler_25.03.0-5_source.buildinfo
Files:
 cff445d955e50a88c06c0d0eedd07786 3934 devel optional poppler_25.03.0-5.dsc
 46d8689441a68f5f79e005c78e6466a3 42088 devel optional poppler_25.03.0-5.debian.tar.xz
 37942fd39558dd5f26e182ab980da6d2 17065 devel optional poppler_25.03.0-5_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmiHPZ4ACgkQ5mx3Wuv+
bH2sqw/+PRW3nsKch8CRftdCAGldWxUnLHkBoQYIrSzaEVs2So6Caf8pXx0eeFEn
9bZFhtsMVsutrUIoW3wD2ydgmFOV+2dp4TGoOF9YTuv6l23FWBHPAy2aPy5fQpM4
vpjYc9f4zJoBFUPN2adopy4134Nl/Zs4a1v696N3yPDVIZy7CpeEBH2EvBHYwg6S
g2xye1G+A9lTK24KyU93CWMGFKuqcXeyPODkKQ3dy9qJnI7DmhqL+YiiPB2sDLPk
d6/FaRUUGXfvbGs701VnmQGcPNldmrNzyb9fNWhGv8ufsDyFKIecetxsnrM21q82
Vu14tFtH/W0lM3wzMk04R0dE6Ubnf17Ip3d1zoFBRlouVLTY5Y0xTyIS0joUSMs/
ebTZdlbgC3XxvJhwwgq4O4xyWg1hAOU9Y8ixOUB+oD1zruG/AOeUleM4b5/agn77
54P+Bw0p5O0QfIkDnwZoHPlyXoKCLFgqmQRTQ9qWDWdCPcv+Y3Qhalp1axQ7Pk9t
OLgrfwu+TUnbdehVGn9y3VuGjrE38g1D2tyBUz37wZsGFydK7AiKYqCmifgDj5e+
G1++byPOqbivyT9x6967dG2Q+VXDkb4N36fCbAKC3Vt1lEu5CB/I6ZwxktDYZ7D1
E6u/61qbc/fvhYaBv2tJGRrmNHdM0XsB80A4OKvfhDeqQW0Frt0=
=vEGc
-----END PGP SIGNATURE-----

Attachment: pgpoed0ZD6Bbt.pgp
Description: PGP signature


Reply to: