-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 Nov 2026 18:18:39 +0100 Source: poppler Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 26.07.0-4 Distribution: unstable Urgency: high Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Closes: 1148267 1150515 Launchpad-Bugs-Fixed: 2171246 Changes: poppler (26.07.0-4) unstable; urgency=high . * Team upload . [ Marc Deslauriers ] * SECURITY UPDATE: stack overflow via long password - debian/patches/CVE-2026-107705.patch: Decrypt: Properly apply password length limit in poppler/Decrypt.cc. - CVE-2026-107705 (Closes: #1150515) (LP: #2171246) . [ Jeremy Bícha ] * SECURITY UPDATE: integer overflow in SampledFunction::SampledFunction - debian/patches/CVE-2026-107705.patch: Fix shift overflow when a sampled function only has 32 bits in poppler/Function.cc - CVE-2026-93311 (Closes: #1148267) * autopkgtest: Use -Wno-sfinae-incomplete to work around qt6 error with gcc-16 Checksums-Sha1: 2f0925fc9b2eb3f06ba062dd0f742cc367c90a77 4028 poppler_26.07.0-4.dsc da20e28bb23cce8a05d7b9bfe209b23ec9f49495 2027720 poppler_26.07.0.orig.tar.xz 98bf27a0434a0eff2c64ca811434a89d903cd7d3 833 poppler_26.07.0.orig.tar.xz.asc 0a546f5b59227417dd5485016cf26c4183170aff 44832 poppler_26.07.0-4.debian.tar.xz b3755d3d2eebd4c2c0692ba10f86ad2344a5d4e7 8995 poppler_26.07.0-4_source.buildinfo Checksums-Sha256: be824ec8015e072d01903eaeb3ed09353086558b6564ff71934d6685b704a529 4028 poppler_26.07.0-4.dsc 304832f48f8a47fdca90c6b6d1f684e68f37c10c9a0726f345f4ca9df4ca01e2 2027720 poppler_26.07.0.orig.tar.xz aafa340dbbee102347eaa790b653e72f64c2a22f45e45ace4953495a6f84bb8d 833 poppler_26.07.0.orig.tar.xz.asc 45c988b58674fadfb2cd7376bfb9e21b8997bc5475183223423955389a54eb0d 44832 poppler_26.07.0-4.debian.tar.xz 71dbca0f3923307245a54333302ca338793678dd918b6bdfe700fc20019b404b 8995 poppler_26.07.0-4_source.buildinfo Files: d90b8c5691b154cc0da9573015c3ceae 4028 devel optional poppler_26.07.0-4.dsc d82e73dd42f525b042a9860e95948e2e 2027720 devel optional poppler_26.07.0.orig.tar.xz 0181bfd5fdac10fbbd3507c45a07cb0a 833 devel optional poppler_26.07.0.orig.tar.xz.asc d510fafbd2a5d896d41604bcdda54c28 44832 devel optional poppler_26.07.0-4.debian.tar.xz ce5eb01a3843a87e1a732c858694500d 8995 devel optional poppler_26.07.0-4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmrsvXwACgkQ5mx3Wuv+ bH1MGQ//cFQMyhNgpmKq0KBwSjwMkSCdrw9Pp0I7WbQsremoomjZoFUO/Sov4v5Q WRTRwmGupOKNi0pDOXg4woR55yWo/qWowyVhtZZhsdhjRaPLEEVfZpZyF/RvkTA+ IOK/9k0/MvC2kdJxcgrckH2TztA852UZQ5lvYL0npKO9n+Rke0Q93bPIYWz09GpO sFlFBALWZ65jKkzaFwUmcUxknWX+BNRYHGxu79fM4A3QppYO0TQUssMApo63/p03 bhkWseLevkLodQVSrUN/B7Oww1i49Iv57AkjH1jjxpwI4Rm4p9/aypkBCR3MRL6a MEERW1C9YvnPaYK3+2+13xqlor/TP+Hic2SHXlfggZEIJ1s1VW6tvLPO0kPFlzH+ WihvdgSV7KNbrJN9o5WlJRk/p9HrnnUYRX62H9AwQcax4OGSgEQ0LxdGW+IZD3fN XaPjUYg2HXJmUBZDr8ZqKGgBB9UZeARiIyoHc/wvEj+nYZFh4WBdW4Sx33JwTddi MlkV1svE8+Clt30tsqCx8hykYisoEZT+PXwCqtUrUoo0O2vhh+7umr25VctMGZgF ZLChUk32fn/FSmyLEsmwCnyMiOj8WxlRZv9cW0MjKsWCk/+U7qpWlFEQBgNGtNuU TJO21YfrJ7wU6fkHmblj8/iUp70j79ST+UctAWTO1pbSRt5Ayq8= =g8Lp -----END PGP SIGNATURE-----
