[From nobody Tue Oct 6 17:21:08 2026 Received: (at submit) by bugs.debian.org; 18 Sep 2026 15:37:36 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-5.0 required=4.0 tests=BAYES_00,MD5_SHA1_SUM, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 46; hammy, 149; neutral, 55; spammy, 1. spammytokens:0.954-+--launched hammytokens:0.000-+--merge_requests, 0.000-+--UD:security-tracker.debian.org, 0.000-+--security-tracker.debian.org, 0.000-+--securitytrackerdebianorg, 0.000-+--sk:gitlab Return-path: <jmm@inutil.org> Received: from inutil.org ([51.38.114.215]:56584 helo=vps-b7ad3695.vps.ovh.net) by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <jmm@inutil.org>) id 1x7aec-000Tp2-2P for submit@bugs.debian.org; Fri, 18 Sep 2026 15:37:36 +0000 Received: from soju.fritz.box (p548dc2fb.dip0.t-ipconnect.de [84.141.194.251]) by vps-b7ad3695.vps.ovh.net (Postfix) with ESMTPSA id B095C3A for <submit@bugs.debian.org>; Fri, 18 Sep 2026 15:37:33 +0000 (UTC) Received: from jmm by soju.fritz.box with local (Exim 4.100) (envelope-from <jmm@soju.westfalen.local>) id 1x7aeZ-00000000LTF-2QK1 for submit@bugs.debian.org; Fri, 18 Sep 2026 17:37:31 +0200 Date: Fri, 18 Sep 2026 17:37:31 +0200 To: submit@bugs.debian.org Subject: poppler: CVE-2026-93312 CVE-2026-93313 CVE-2026-93314 Message-ID: <aq1au53mA4V8z2Vw@pisco.westfalen.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline From: =?UTF-8?Q?Moritz_M=C3=BChlenhoff?= <jmm@inutil.org> Delivered-To: submit@bugs.debian.org Source: poppler X-Debbugs-CC: team@security.debian.org Severity: important Tags: security Hi, The following vulnerabilities were published for poppler. CVE-2026-93312[0]: | A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is | the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. | This manipulation causes null pointer dereference. It is possible to | initiate the attack remotely. The exploit has been published and may | be used. Upgrading to version 26.08.0 is recommended to address this | issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. | Upgrading the affected component is advised. https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759 https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314 Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067 (poppler-26.08.0) CVE-2026-93313[1]: | A vulnerability was found in Freedesktop Poppler 26.07.0. The | impacted element is the function JBIG2Stream::readCodeTableSeg of | the file poppler/JBIG2Stream.cc. Performing a manipulation results | in integer overflow. The attack can be initiated remotely. The | exploit has been made public and could be used. The patch is named | eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is | recommended to deploy a patch. https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1760 https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2322 Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/eb87cf711563894649bd0c365baa479401dc6d51 CVE-2026-93314[2]: | A vulnerability was determined in Freedesktop Poppler 26.07.0. This | affects the function FoFiTrueType::mapCodeToGID of the file | fofi/FoFiTrueType.cc. Executing a manipulation of the argument | segCnt can lead to integer overflow. The attack can be launched | remotely. The exploit has been publicly disclosed and may be | utilized. This patch is called | ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to | implement a patch to correct this issue. https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761 https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315 Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a (poppler-26.08.0) If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-93312 https://www.cve.org/CVERecord?id=CVE-2026-93312 [1] https://security-tracker.debian.org/tracker/CVE-2026-93313 https://www.cve.org/CVERecord?id=CVE-2026-93313 [2] https://security-tracker.debian.org/tracker/CVE-2026-93314 https://www.cve.org/CVERecord?id=CVE-2026-93314 Please adjust the affected versions in the BTS as needed. ]