Debian Patches
Status for poppler/22.12.0-2+deb12u3
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0001-OutlineItem-open-Fix-crash-on-malformed-files.patch | OutlineItem::open: Fix crash on malformed files Fixes #1399 |
Albert Astals Cid <aacid@kde.org> | no | 2023-05-17 | ||
| 0002-JBIG2Bitmap-combine-Fix-crash-on-malformed-files.patch | JBIG2Bitmap::combine: Fix crash on malformed files Fixes #1553 |
Albert Astals Cid <aacid@kde.org> | no | 2024-12-17 | ||
| 0003-PSStack-roll-Protect-against-doing-int-INT_MIN.patch | PSStack::roll: Protect against doing int = -INT_MIN | Albert Astals Cid <aacid@kde.org> | no | 2025-03-24 | ||
| 0004-Move-isOk-check-to-inside-JBIG2Bitmap-combine.patch | Move isOk check to inside JBIG2Bitmap::combine | Albert Astals Cid <aacid@kde.org> | no | 2025-03-31 | ||
| Make-sure-regex-doesn-t-stack-overflow-by-limiting-i.patch | Make sure regex doesn't stack overflow by limiting it Happens with very long pdfsubver strings when compiled with -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -flto=auto |
Albert Astals Cid <aacid@kde.org> | no | debian | https://gitlab.freedesktop.org/poppler/poppler/-/commit/f54b815672117c250420787c8c006de98e8c7408 | 2025-03-26 |
| Check-for-duplicate-entries.patch | Check for duplicate entries | Kevin Backhouse <kevinbackhouse@github.com> | no | debian | https://gitlab.freedesktop.org/poppler/poppler/-/commit/4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0 | 2025-09-03 |
| SplashOutputDev-Fix-integer-overflow-in-tilingPatter.patch | SplashOutputDev: Fix integer overflow in tilingPatternFill Use checkedMultiply() to check integer multiplication of surface size and number of repetitions to avoid integer overflow and possible memory issues. |
Marek Kasik <mkasik@redhat.com> | yes | debian upstream | https://gitlab.freedesktop.org/poppler/poppler/-/commit/8352264766652b98336e92359a70b3161a9ab97a | 2026-05-21 |
| CVE-2024-6239.patch | pdfinfo: Fix crash in broken documents when using -dests | Albert Astals Cid <aacid@kde.org> | yes | debian upstream | https://gitlab.freedesktop.org/poppler/poppler/-/commit/0554731052d1a97745cb179ab0d45620589dd9c4 | 2024-06-07 |
| CVE-2025-43903.patch | Properly verify adbe.pkcs7.sha1 signatures. For signatures with non-empty encapsulated content (typically adbe.pkcs7.sha1), we only compared hash values and never actually checked SignatureValue within SignerInfo. The bug introduced by c7c0207b1cfe49a4353d6cda93dbebef4508138f made trivial signature forgeries possible. Fix this by calling NSS_CMSSignerInfo_Verify() after the hash values compare equal. |
Juraj Šarinay <juraj@sarinay.com> | no | debian | https://gitlab.freedesktop.org/poppler/poppler/-/commit/f1b9c830f145a0042e853d6462b2f9ca4016c669 | 2025-03-06 |
| CVE-2025-50420.patch | Fix crash in pdfseparate Don't continue recursing in PDFDoc::mark* if things looks a bit weirder than expected |
Sune Vuorela <sune@vuorela.dk> | yes | debian upstream | https://gitlab.freedesktop.org/poppler/poppler/-/commit/a7025904e3330dd6cf95f3664ef6fc77034cc5e1 | 2025-07-29 |
| CVE-2025-52886.patch | Limit ammount of annots per document/page | Sune Vuorela <sune@vuorela.dk> | yes | debian upstream | https://gitlab.freedesktop.org/poppler/poppler/-/commit/ac36affcc8486de38e8905a8d6547a3464ff46e5 | 2025-06-03 |
All known versions for source package 'poppler'
- 26.07.0-3 (sid)
- 26.07.0-2 (forky)
- 25.03.0-5+deb13u4 (trixie)
- 25.03.0-5+deb13u3 (trixie-security)
- 22.12.0-2+deb12u3 (bookworm-security)
- 22.12.0-2+deb12u2 (bookworm)