[From nobody Tue Oct 6 17:21:08 2026 Received: (at 1148266-close) by bugs.debian.org; 6 Oct 2026 16:19:04 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 97; hammy, 150; neutral, 190; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:41902) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xE7se-000Qrq-0U for 1148266-close@bugs.debian.org; Tue, 06 Oct 2026 16:19:04 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xE7se-005bXl-0A for 1148266-close@bugs.debian.org; Tue, 06 Oct 2026 16:19:04 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=4OYruD2QKqd6A3F/kQuWBWF/IHZZSRCfvtBVrf8IvPI=; b=baKJ1WDroJSs25bNmoaQiKbO0u 1x+Kt1vjN0/SgfkpkaZCDT9Vm4Pgdn3GWYyDbalbL2h8qidzx2gWhUYRkSytNAmr8YVBNtHYy3ZZk ZucUNAnMUBEkl9wvwAMboKg1vodK4wayb3GAjR1noC3/VkVakW9g48FGX5CXrRbaq/sCsMzg7E44N tKakVZPC+MP7x04BpYjysoe9PHf5ndQWfGP6tYvqpyMBN3sARPAdWreIvO1zhP7SF/CzxWgi16Qme oSk5hHyW4sCNTRiwrse1mujmduSVqQTZi0qt7Ui4sCV8UdEmAiKYgPTS1JUudSjEJZ7UnYrCAeNsT Rfe17dJw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xE7sd-0000000494N-0zoS; Tue, 06 Oct 2026 16:19:03 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1148266-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: poppler Debian: DAK Debian-Changes: poppler_26.07.0-3_source.changes Debian-Source: poppler Debian-Version: 26.07.0-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1148266: fixed in poppler 26.07.0-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8489679915497738709==" Message-Id: <E1xE7sd-0000000494N-0zoS@fasolo.debian.org> Date: Tue, 06 Oct 2026 16:19:03 +0000 X-CrossAssassin-Score: 2 --===============8489679915497738709== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: poppler Source-Version: 26.07.0-3 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of poppler, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1148266@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated poppler package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 06 Oct 2026 17:58:35 +0200 Source: poppler Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 26.07.0-3 Distribution: unstable Urgency: high Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@l= ists.alioth.debian.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1148266 1149697 1149698 Changes: poppler (26.07.0-3) unstable; urgency=3Dhigh . * Team upload . [ Marc Deslauriers ] * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts - debian/patches/CVE-2026-102620.patch: Fix integer overflow in FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc. - CVE-2026-102620 (Closes: #1149697) * SECURITY UPDATE: overflow in SplashClip::clipToPath - debian/patches/CVE-2026-102621.patch: Fix integer overflow in SplashClip::clipToPath in splash/SplashClip.cc. - CVE-2026-102621 (Closes: #1149698) * SECURITY UPDATE: null pointer deref issue - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in poppler/JBIG2Stream.cc. - CVE-2026-93312 * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg - debian/patches/CVE-2026-93313.patch: Fix integer overflow in JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc. - CVE-2026-93313 * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Impro= ve b*12 overflow check in fofi/FoFiTrueType.cc. - CVE-2026-93314 (Closes: #1148266) Checksums-Sha1: 6b8e84f29366c8a48344e8890f83fd327a42733f 3778 poppler_26.07.0-3.dsc 21dd188c5abe5893bf743f697d456a7e6501a2a1 42544 poppler_26.07.0-3.debian.tar.= xz cff07084aff009a1fa844c1f631f9a881059f738 8997 poppler_26.07.0-3_source.build= info Checksums-Sha256: cb2d4e2f34d7b02f5c3d30383a5b477d22ba14314bfca7392091f6858f2c57c7 3778 popple= r_26.07.0-3.dsc 127d549f22048fb2198234f005e9eebcb6c242570e39f6829183cc9b0c4ed556 42544 poppl= er_26.07.0-3.debian.tar.xz cf13e8b296ce6e5dbb2887f52f17bcc73be47ef3e9915cf780d85f1db370710d 8997 popple= r_26.07.0-3_source.buildinfo Files: f0559d025982c50f56a6501ab3066aeb 3778 devel optional poppler_26.07.0-3.dsc b36c2a7fcdb8440d8bdfc1e99dac5ff3 42544 devel optional poppler_26.07.0-3.debi= an.tar.xz 5c77e7278c58144c22d67f9574cf5579 8997 devel optional poppler_26.07.0-3_sourc= e.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmrFGwIACgkQ5mx3Wuv+ bH0k0w//YX1RyHUpy5CuX2cHhi79zZBLM2oeXdWWFvZrWujpir1mgs43uzMpTENL sjis4J8OxqCWGtW0DYgccNju/VxUyZk6YAJIS4NBiN5X+kFNRJz5qXuhRXGXM5HC BEGH81CAbGDcv7yh4aNLFvhSGALokQos+7X059jDRcjHTxU+5rh+AMBKBKUSj79H xZfzQxBzcO5mBLSMekIMFlGmQo9Um1JOpVSzef0BnxC03fBWCmGTJzYTO6uwGM25 X/QPt+qAbWhjjcX1Ma25gs4wY8Boi6gDPFK31CKkrvOheYtxTM2X0vPOYRC3aNvY YmN5PHjKFY9NjIlaayCPrrPVG/rceIJoTIu6t+rEI8HJd9e/zoetLnapUFy5By9E 9x5hFLXE5zAFHz5xqvgJT/jpMUXXiH9yHA+vWc5XEZGFk47Nit/gK/+zxBoywEkr HOcGTHOVQPru7ERVAq00P8jtdE8e+ZHcxNn047ue9bWDJYWrkiuUDxrkFycjOHZX l4cCuZS1O2KMBNwY9AG6eGNGHuhAgkq29jXvjYN9xLlCEtX1E4LPuyWeGH0M+yor 1arQzQh75sfkF4XddlgrncRvJxWh/iTKRLK2vK8thVxTNAj7So1YBg1D/nKIBvGF UPhRkVyQ9dACuzaQmvrdrNnOdDNHZbmx4zed09UJWb8XDnOvjtU=3D =3DSTWq -----END PGP SIGNATURE----- --===============8489679915497738709== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasUfdwAKCRCb9qggYcy5 ITk2AQCdXDQ963oSrTOdwyFw28i2q53u3DQYwoxSJccZVOE68gD6AhXQ+afV1mhK UgNEDo7ks7AW4ctcwichcFcOJiGFGwA= =phQw -----END PGP SIGNATURE----- --===============8489679915497738709==-- ]