[SECURITY] [DSA 6334-1] poppler security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6334-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
June 09, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : poppler
CVE ID : CVE-2025-43718 CVE-2025-52885 CVE-2026-10118
Debian Bug : 1117046 1117853 1138708
Several vulnerabilities were discovered in poppler, a PDF rendering
library, which could result in denial of service, information
disclosure, or potentially the execution of arbitrary code if a
specially crafted file is processed.
For the oldstable distribution (bookworm), these problems have been fixed
in version 22.12.0-2+deb12u2.
For the stable distribution (trixie), these problems have been fixed in
version 25.03.0-5+deb13u3.
We recommend that you upgrade your poppler packages.
For the detailed security status of poppler please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/poppler
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoogp5fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0RfLRAAoBlJe9X2PUKsI2o3CTS6EnV0wHIB8a0kuud07PnfyRBwCfMmu+3o/lsS
AhnTol70eilfKXNAaUdT4I76vAy59FHhwNcAC1Gj2OKETK+sz4X+y31vj1Xv+Aja
/Tw58kJrckz/+HLsnKv1lBfj7+TWbnvUejMlLkYHUUNprBtvBVW70r+vkKToxIZQ
GuxN/6ACEx1pU5tr7ll874aDGxZatFTNspd0wZjFCgF6g+11PpODkFDz/d9IPKsq
l0ECBuiHCURrAJO/mmnwc/wf8e6Y1/Lzt9lyyWNCAQ3YikYJXKzkvel1AVpL1D+F
M7eYRdITIyQoW8SAq/etZEKJPGbZ9SCnLi+/2yxqC2jtnpSRZp08UI0SvrC9DU8j
+3q3KcMLMMt86D/MKMLdwwonNDlgtUi1s7mD6DNFcidKthw4MzdQxtEGQiKcaGqF
1ykG3zV2919Qyl/1lxsyjpX7wuyCKR4p44xeRgg/VeBh+iAq6yi2MoN6ix8tG/FJ
XOubdgenc8UvT86+T72X2nnotWYfTYTscSGyEnNnUSV6ThSkbdVf6/QfqrbWXlA3
73Qax1Z9yX8ke3HP3xaKbVnccy7TnGxjeJT8bMzHhSkkZ1ULHrScatbyV90alZRo
R9pWh0hU9lAywddhq/kqOwRuvtZPp3h9L/Bd/ycQ/InFZeMXRWU=
=Qcet
-----END PGP SIGNATURE-----
Reply to: