[From nobody Thu Jun 11 21:49:10 2026 Received: (at 1117046-close) by bugs.debian.org; 11 Jun 2026 20:48:41 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.9 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS, SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 77; hammy, 150; neutral, 169; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:57356) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmKP-001Qxl-1T for 1117046-close@bugs.debian.org; Thu, 11 Jun 2026 20:48:41 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmKN-00Dwm3-2k for 1117046-close@bugs.debian.org; Thu, 11 Jun 2026 20:48:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Ge89q6DtZz1HGjlgdUkrNNJxNEvnN3G84Tjka/kgEAA=; b=WcQw4u7v72McOXpntVtAdxSL8G t3asTAp8pb6emhwsxuMtZMXu50v9kFUqQgKTTcC9L5T0WtJBNlq7uA4727Y4ameHkxg2HGM4JSC90 y2soEOJNXWMN7Eg4zVqVqSjbrVWLI+P3BdQ0yQppQkZgjt7UasDh7kOEijFFTxpMXWDFJrYlPgwp/ 8Io/+4QwWXHcPAPqc3CbMk+IgiCYckI0YaeLGIRnXjPielSvKeQOXoHmtOhNJw+aDcy424BqolSF3 enI0+DaF8veBF1FW4CD7bNCzjFBvLW1HAOj8rQyeLC5W9BosyQOjZYwjJRiyVPok9EZnDC070KR+q xsyoAaqA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmKM-0000000EUgi-2oUO; Thu, 11 Jun 2026 20:48:38 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1117046-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: poppler Debian: DAK Debian-Changes: poppler_22.12.0-2+deb12u2_source.changes Debian-Source: poppler Debian-Version: 22.12.0-2+deb12u2 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1117046: fixed in poppler 22.12.0-2+deb12u2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1475686133914243745==" Message-Id: <E1wXmKM-0000000EUgi-2oUO@fasolo.debian.org> Date: Thu, 11 Jun 2026 20:48:38 +0000 --===============1475686133914243745== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: poppler Source-Version: 22.12.0-2+deb12u2 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of poppler, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1117046@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated poppler package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Jun 2026 15:00:14 +0200 Source: poppler Architecture: source Version: 22.12.0-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@l= ists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1117046 1117853 1138708 Changes: poppler (22.12.0-2+deb12u2) bookworm-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * Make sure regex doesn't stack overflow by limiting it (CVE-2025-43718) (Closes: #1117046) * Check for duplicate entries (CVE-2025-52885) (Closes: #1117853) * SplashOutputDev: Fix integer overflow in tilingPatternFill (CVE-2026-101= 18) (Closes: #1138708) Checksums-Sha1: 4116288d991eba62296630a24681f71f8f08399f 3641 poppler_22.12.0-2+deb12u2.dsc 28bba6fd877ada1629d5e093d7b1d3701a6bb36f 1845856 poppler_22.12.0.orig.tar.xz cd931aeda929739e6bc9e4e08c8a0d70fb684f12 40648 poppler_22.12.0-2+deb12u2.deb= ian.tar.xz 2de502f143869928383125ba7d9cf6a87110dbe8 6752 poppler_22.12.0-2+deb12u2_sour= ce.buildinfo Checksums-Sha256: 7414799e91fc1fde389c24aacfc811ae5676d4be713be085870bfe978621bb88 3641 popple= r_22.12.0-2+deb12u2.dsc d9aa9cacdfbd0f8e98fc2b3bb008e645597ed480685757c3e7bc74b4278d15c0 1845856 pop= pler_22.12.0.orig.tar.xz fd5bc595a83f013adfc9f576ccf5184b398ba33aca889cef7c09cb5736c5862f 40648 poppl= er_22.12.0-2+deb12u2.debian.tar.xz ae22eaaaed523ddc654a74850c149ae40d1e8a2dd6498a78049422880fa1ad37 6752 popple= r_22.12.0-2+deb12u2_source.buildinfo Files: 73aca07092107e88f2d8e00f38b49b9a 3641 devel optional poppler_22.12.0-2+deb12= u2.dsc 39b6a69eceba6adb8afbcee8d47385fd 1845856 devel optional poppler_22.12.0.orig= .tar.xz 2b985eefb7ecbcc603656f857e1c7be1 40648 devel optional poppler_22.12.0-2+deb1= 2u2.debian.tar.xz 5349c2ed29141bfe6e2b404830686070 6752 devel optional poppler_22.12.0-2+deb12= u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmokO+hfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ETTEP/iOGW9NSZgrjL1LwHhI4t1LpP3yMLzCk jhvdX3leuWrbhs9opgADvW6v6B2Y6dNfysE8W8jwl24GIHeQ6pF1adeGwxTNcYsA SYt61Hia+CBd1bgNCYljv5EzfZzsbomuB0JmJt0YQxV+/usbjoygzG/8zwzOZb61 7fIwEaoqK1HhcIlscA3XMBYNBYIGsm1cck37YMM6hqEwEAPRusTUUMjoY5JZOjYa ABl1EIy3CGeTynaGxclQN014xjZWsahSKrE3ftJG6BjawpR8slZ6wSqcGxaaveE2 XTXRDfw9kwTYmxLr/iLx+jqSMREMoLZc0t/84qUnV2k3VE9E8EfBRtjlC/VRYMOG shWvhEmlla2TH0klLQK0erzMHpWaOTTm9IPA3Lu1iGkZju12nEvF154qZcbt07Y7 uit59VWKlqIJGD4WmN5StliVZ1Fpe5BsSBnmlDn4z3oVV9E0sLn9/FNL31Q37+Bp 6Pjja+giJPW47ibZTuFEADUwTvOyt2EybIvcRBcXrNQ25weZvS+g8ff7LLySMK/G NoYBmeAWGm98nGSgDvx+OXdMKK85mn4ypgguFb80wmG8Deeur+fX4kzfNg6hAFd4 gqnApQ7tkUscgulJsvbdCglM8DbIKI78JA6bsK079AMbEdqZy7Q0AjLfqp7rneO+ a9O6kD+oMROw =3DE49I -----END PGP SIGNATURE----- --===============1475686133914243745== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaisfJgAKCRCb9qggYcy5 Ifp2APwOZYlFJVQLzOw+8vrHNA+jSETPbjfxTz+CtSnho48OegD/VpKjWsnWhSxB HHIkIsiEyT+rClDyani10+AHgpkWLgE= =bgxY -----END PGP SIGNATURE----- --===============1475686133914243745==-- ]