[From nobody Thu Jun 11 21:49:08 2026 Received: (at 1138708-close) by bugs.debian.org; 11 Jun 2026 20:47:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 98; hammy, 150; neutral, 150; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:53988) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmJJ-001QpD-2W for 1138708-close@bugs.debian.org; Thu, 11 Jun 2026 20:47:33 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmJJ-00EDDo-2G for 1138708-close@bugs.debian.org; Thu, 11 Jun 2026 20:47:33 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=hPudQOG0cQqgRq11DQT2YRnOS3Nefb8ryuxzpym9XGI=; b=GnGrMaFmV7c/8Rs6heCt8KVA0u wPquhchGj9uqsh8HfESKFFwKWBuCcutPt93ASvKz/P7jRhxr5Ueyxf1oTEf3kIiuUOQJ8iGGfPD1l zNqcvlySKa4TLELkiXtaTla1LbhHnhrXGhVUUcURZbVSLbv3BrbuM4rIcW7HlipQi7sMSH7zykUOs KIjN6/FJCBAiXP5pBhEMfnhbg+ivgJ0okHoDJ/YcyPx9OvWLBmti0QK2YkP2zojTORCDycyihWyaL tQJphkYeS6y2wEGQwjcF71CZAdFzWnGRa092NXVTCpcX5mezT7MSoHEsyAEpu74qK3TaUln0qkDsy 0mT5jp+Q==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmJI-0000000EUSS-3km0; Thu, 11 Jun 2026 20:47:32 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1138708-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: poppler Debian: DAK Debian-Changes: poppler_25.03.0-5+deb13u3_source.changes Debian-Source: poppler Debian-Version: 25.03.0-5+deb13u3 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138708: fixed in poppler 25.03.0-5+deb13u3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============0147960589155217329==" Message-Id: <E1wXmJI-0000000EUSS-3km0@fasolo.debian.org> Date: Thu, 11 Jun 2026 20:47:32 +0000 --===============0147960589155217329== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: poppler Source-Version: 25.03.0-5+deb13u3 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of poppler, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138708@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated poppler package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Jun 2026 11:07:43 +0200 Source: poppler Architecture: source Version: 25.03.0-5+deb13u3 Distribution: trixie-security Urgency: high Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@l= ists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1117046 1117853 1138708 Changes: poppler (25.03.0-5+deb13u3) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * SplashOutputDev: Fix integer overflow in tilingPatternFill (CVE-2026-101= 18) (Closes: #1138708) * Make sure regex doesn't stack overflow by limiting it (CVE-2025-43718) (Closes: #1117046) * Check for duplicate entries (CVE-2025-52885) (Closes: #1117853) Checksums-Sha1: 8b17e8eeb60c2fb37a25ce36fc7bcfc095678a13 4121 poppler_25.03.0-5+deb13u3.dsc ee5041be2a6bd6b6e5627776c7c82b788e238f58 1954516 poppler_25.03.0.orig.tar.xz cb74cff2ea515391ee267c81a926b0ece4a14991 43964 poppler_25.03.0-5+deb13u3.deb= ian.tar.xz 4f393b77eeecfaebbf22a1d38ac3d75654911d6b 6752 poppler_25.03.0-5+deb13u3_sour= ce.buildinfo Checksums-Sha256: 4c867dedb90253a5693832f2187ee00cc4db1c997c7573f2289e4048480ff1f9 4121 popple= r_25.03.0-5+deb13u3.dsc 97da4ff88517a6bbd729529f195f85c8d7a0c3bb4a3d57cb0c685cbb052fe837 1954516 pop= pler_25.03.0.orig.tar.xz 1234f92a2cbf5dafc80f34b51e98d1d79011fd51072744109c0f5c2aff32c658 43964 poppl= er_25.03.0-5+deb13u3.debian.tar.xz d6145e8aefdd9df8b648e5117de0b55571d15fa89a8b2718351c0354b3789c4a 6752 popple= r_25.03.0-5+deb13u3_source.buildinfo Files: 58612a17225657930e99712d758f4a68 4121 devel optional poppler_25.03.0-5+deb13= u3.dsc 21bb345c070ab16d7cd3bafcd513cc02 1954516 devel optional poppler_25.03.0.orig= .tar.xz 561810f6047d557cd24c78cfd2f69f96 43964 devel optional poppler_25.03.0-5+deb1= 3u3.debian.tar.xz 4109a65dfb6a5ee70c2fe7d801a0846e 6752 devel optional poppler_25.03.0-5+deb13= u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmokO0dfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ebc4P/3j31hUaSEt4mDqRErLcG+N/ZGz90An6 7j8gu1FUIpFFLLVXLJNgyHBNdNrpwrwB/KTrS5zBKY1i6YdNDql3C7YnunlPLANM DMnsQYejHklGBQoMbzP4PK0FIrLjHt/KkqyNr9JbDPZ7hCS6jJJfVpHT8EtCLlfQ WwUWcuwpIzUuauLjg3FeQHFAlWLhSQZDeghHbiQwkzb4O6E0RdEHTG39wlByfq4+ IrnwIzeowbtM01OfoTILJ/wK9HAsspNAfROXnVJLZ6W1REYXOQ0Ys0+ZBAiJLUOB vcOfRm/IcNBeKOaLHnJuc9F/355xacMFpZrgdCsPaDer1GhOv712h6g8+nrWwpN7 8UMcJmcUJDBS9E7Z/z5R28UVtxk/7FsA9Jgg4aO4At70MTSr+kLCF/tSjLIlxLMY e0v82K+YC407ZsvliUIh4QA7nvr92mBDYQ1vX+zsvqkon8bS/nSmAd5OtUzvQJgW QWq19XF79kvqX1JemXN2YN5/dHL1zTh7hAzyuUzkAWiRVq7gedd7xR0YhGoFAct0 k794rTiaSXlkdafGUxrVv3AQ+2CufoArs4iB+SUOAXey94rG0mHDYlzUx4uIFirM AWGJnzixcSf6Ca0fi71WPOuHfky2ATmc6Cr0uS4u9BVUKkGCyE3HAEenIEuvPSth 9kf//BntPfoH =3DbOAU -----END PGP SIGNATURE----- --===============0147960589155217329== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaise5AAKCRCb9qggYcy5 IZIqAQDrM+InI4CbLOe1PV1S1MQ7w709Eh8NiQRguM1zhiUrpQD+PjK13MN/z4+w nMso3M1ohbBBy6zRqYnboXvewQUMyAY= =QKFN -----END PGP SIGNATURE----- --===============0147960589155217329==-- ]