Debian Patches
Status for poppler/26.07.0-4
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-102620.patch | Fix integer overflow in FoFiTrueType::cvtSfnts Issue #1762 |
Albert Astals Cid <aacid@kde.org> | no | 2026-08-08 | ||
| CVE-2026-102621.patch | Fix integer overflow in SplashClip::clipToPath Issue #1763 |
Albert Astals Cid <aacid@kde.org> | no | 2026-08-08 | ||
| CVE-2026-93311.patch | Fix shift overflow when a sampled function has 32-bit samples sampleBits is validated to be between 1 and 32, so 1 << sampleBits shifts an int by its full width: Function.cc:376: runtime error: shift exponent 32 is too large for 32-bit type 'int' bitMask is only read in the branch that unpacks sample sizes other than 8, 16 and 32, so the bad value was never used, but the shift itself is undefined. Shift a 64-bit value instead. Found with -fsanitize=undefined. |
William Bader <william@newspapersystems.com> | no | upstream, 26.10.0 | 2026-09-08 | |
| CVE-2026-93312.patch | Fix nullptr + number Issue #1759 |
Albert Astals Cid <aacid@kde.org> | no | 2026-07-26 | ||
| CVE-2026-93313.patch | Fix integer overflow in JBIG2Stream::readCodeTableSeg Issue #1760 |
Albert Astals Cid <aacid@kde.org> | no | 2026-08-07 | ||
| CVE-2026-93314.patch | FoFiTrueType::mapCodeToGID: Improve b*12 overflow check Issue #1761 |
Albert Astals Cid <aacid@kde.org> | no | 2026-07-26 | ||
| CVE-2026-107705.patch | Decrypt: Properly apply password length limit Previously we did apply it in the functions that used len but not on revision6Hash that took the string |
Albert Astals Cid <aacid@kde.org> | no | 2026-10-08 |
All known versions for source package 'poppler'
- 26.07.0-4 (sid)
- 26.07.0-3 (forky)
- 25.03.0-5+deb13u4 (trixie)
- 25.03.0-5+deb13u3 (trixie-security)
- 22.12.0-2+deb12u3 (bookworm-security)
- 22.12.0-2+deb12u2 (bookworm)