• Accepted poppler 25.03.0-5 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Mon Jul 28 11:30:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 28 Jul 2025 10:55:12 +0200
    Source: poppler
    Built-For-Profiles: noudeb
    Architecture: source
    Version: 25.03.0-5
    Distribution: unstable
    Urgency: high
    Maintainer: Debian freedesktop.org maintainers <[email protected]>
    Changed-By: Jeremy BĂ­cha <[email protected]>
    Closes: 1108784
    Changes:
    poppler (25.03.0-5) unstable; urgency=high
    .
    [ Marc Deslauriers ]
    * SECURITY UPDATE: DoS via reference count overflow
    - debian/patches/CVE-2025-52886.patch: limit amount of annots per
    document/page in poppler/Annot.cc, poppler/Page.cc.
    - CVE-2025-52886 (Closes: #1108784)
    Checksums-Sha1:
    c66e197423a14d1127b29d6bf0e721f7bacee9f6 3934 poppler_25.03.0-5.dsc
    272b255669bd46975c06d3bacc9bb7f5dca74fd6 42088 poppler_25.03.0-5.debian.tar.xz
    bbbac17efa145776f509e72f8a77e43bd4a257b8 17065 poppler_25.03.0-5_source.buildinfo
    Checksums-Sha256:
    a97af74e39bd6731d2017402176a5241edc01badb2203dd79ee3adc0ab93bd15 3934 poppler_25.03.0-5.dsc
    8f7dddaee9a2f61480c4dfae6923f06749f0ab98d24203363fac4841d2237953 42088 poppler_25.03.0-5.debian.tar.xz
    5e19e85966171850e2f2d816297283177b7e29a36f52bff665afcd1098067642 17065 poppler_25.03.0-5_source.buildinfo
    Files:
    cff445d955e50a88c06c0d0eedd07786 3934 devel optional poppler_25.03.0-5.dsc
    46d8689441a68f5f79e005c78e6466a3 42088 devel optional poppler_25.03.0-5.debian.tar.xz
    37942fd39558dd5f26e182ab980da6d2 17065 devel optional poppler_25.03.0-5_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmiHPZ4ACgkQ5mx3Wuv+ bH2sqw/+PRW3nsKch8CRftdCAGldWxUnLHkBoQYIrSzaEVs2So6Caf8pXx0eeFEn 9bZFhtsMVsutrUIoW3wD2ydgmFOV+2dp4TGoOF9YTuv6l23FWBHPAy2aPy5fQpM4 vpjYc9f4zJoBFUPN2adopy4134Nl/Zs4a1v696N3yPDVIZy7CpeEBH2EvBHYwg6S g2xye1G+A9lTK24KyU93CWMGFKuqcXeyPODkKQ3dy9qJnI7DmhqL+YiiPB2sDLPk d6/FaRUUGXfvbGs701VnmQGcPNldmrNzyb9fNWhGv8ufsDyFKIecetxsnrM21q82 Vu14tFtH/W0lM3wzMk04R0dE6Ubnf17Ip3d1zoFBRlouVLTY5Y0xTyIS0joUSMs/ ebTZdlbgC3XxvJhwwgq4O4xyWg1hAOU9Y8ixOUB+oD1zruG/AOeUleM4b5/agn77 54P+Bw0p5O0QfIkDnwZoHPlyXoKCLFgqmQRTQ9qWDWdCPcv+Y3Qhalp1axQ7Pk9t OLgrfwu+TUnbdehVGn9y3VuGjrE38g1D2tyBUz37wZsGFydK7AiKYqCmifgDj5e+ G1++byPOqbivyT9x6967dG2Q+VXDkb4N36fCbAKC3Vt1lEu5CB/I6ZwxktDYZ7D1 E6u/61qbc/fvhYaBv2tJGRrmNHdM0XsB80A4OKvfhDeqQW0Frt0=
    =vEGc
    -----END PGP SIGNATURE-----


    --==============x23901893414396248=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaIdBAQAKCRCb9qggYcy5 IesTAP4pfh68iVf/j2/VOC63jvhRHtYePEgqz5aFnUtjX8QRDwD+Nk4C2+b7dYVl FASEM1As7dv/hgTMVf9O/bICxPS4wQ8=7/In
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)