-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 04 Jan 2025 17:16:42 -0900 Source: poppler Built-For-Profiles: noudeb Architecture: source Version: 24.08.0-4 Distribution: unstable Urgency: high Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Closes: 1091322 Changes: poppler (24.08.0-4) unstable; urgency=high . * Team upload * SECURITY UPDATE: out-of-bounds read vulnerability (Closes: #1091322) - Cherry-pick upstream fix for the JBIG2Bitmap::combine function in JBIG2Stream.cc - CVE-2024-56378 * libpoppler-glib-dev: Add Provides: ${gir:Provides} Checksums-Sha1: 5e0fb4ecea073df3008caa6da33a02aba9d0bde7 3872 poppler_24.08.0-4.dsc dab4ae83dbd281f091ab308c1c42ef84fe0d84f1 39672 poppler_24.08.0-4.debian.tar.xz 331aa654f569ee193e32644912ad8a4ff938e802 17105 poppler_24.08.0-4_source.buildinfo Checksums-Sha256: d1dacc20bbc2c0dbff59e8e7195bb2884837f5dd1bb8980a9ebe827175df97eb 3872 poppler_24.08.0-4.dsc 792bbe855d5c15d79a9b326ef9934f64f2280d77d0a985265fef88ae2b19ae8a 39672 poppler_24.08.0-4.debian.tar.xz f28d1c1637f15572fcf30611120fe914c1f9c029bcf24eedaee7ed5a5e4fc1ab 17105 poppler_24.08.0-4_source.buildinfo Files: c6e4ce5a7a49ea6110b4357e32064bf9 3872 devel optional poppler_24.08.0-4.dsc d2afef729aabd8fa3fbebe6ccd8063bd 39672 devel optional poppler_24.08.0-4.debian.tar.xz da617d9daebef61ecfd2697319090b44 17105 devel optional poppler_24.08.0-4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmd598YACgkQ5mx3Wuv+ bH3HKBAAiN1t50yUSLHUnKX2026Y2rAsPqdlfL8hSpRgnmjScfkoBfVwnHGHaLZm 4dRoJCHqNngj0ymx4EjTXhEWyevFqOKsDkifw9G6GFDUGDGycBC+u4JNtx/cFCqc 8JbR/qwcBFzSezCLg8ZRKzYjPBz4DtG+G9/ZvdomHnSJ6MaslZms2F5gXQg5VtYX gUgc3jn+GeYuZ2ktf2LevY018N3J/5hxdIJ7DLoEANnmd+NbFVGgMmHCj6Sto9Z4 HBUZxHDnnn1YapBnEY9zerBuD4bXLxnVAcst7NCk07XP0oT033buaAs4thmyJlHu KNCwJhMvIzMuLg7CLl9v/DkIpu5qU27g8nPxfEapQ7kwAP8ZNOs0Ip8rop+ICV0V IDs6Cn1nvlG7TwB5RVf4agpCtmH4GEWMQMRtPFDz7LfqbCrA+kB02RAIkvZH6LLE uyfHkaKWCuRsBhEl211M8lQQo66EW3xWGPJ6rNs16J+cBoG+EemZvTEty1m1z3IQ czAqwdROy3DjOS1pH5ad9olZuoeBWT0NseZRR/rO5VLEj2QIdx8qiLFf5CS6ZYcT 6/uMmc4DuZWJRdACfNDfnPUKJcq+a7RvRNyhrc1Sd+sBWtFcDkzTj4HDcWEmJx5L LsV9oSbf8XrHow9sW180b7XqAG6v0Ryrjdzq/7NBtVzkDCBB3CY= =qTxw -----END PGP SIGNATURE-----