poppler_25.03.0-4_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Apr 2025 18:16:32 -0400
Source: poppler
Built-For-Profiles: noudeb
Architecture: source
Version: 25.03.0-4
Distribution: unstable
Urgency: high
Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers at lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha at ubuntu.com>
Closes: 1103545
Changes:
 poppler (25.03.0-4) unstable; urgency=high
 .
   * Team upload
   * SECURITY UPDATE: Properly verify abde.pkcs7.sha1 signatures
     - Cherry-pick upstream fix for the
       NSSSignatureVerification::validateSignature function
       in NSSCryptoSignBackend.cc
     - CVE-2025-43903 (Closes: #1103545)
Checksums-Sha1:
 0924ee7042db3886c9619362b5cf78612aa4808e 3934 poppler_25.03.0-4.dsc
 7d40fe16b1e4f9dbc18a70f1d6fb60eddbadd3a4 41296 poppler_25.03.0-4.debian.tar.xz
 46e2c0e8cc9526e734725897274db75bbe07e51a 16732 poppler_25.03.0-4_source.buildinfo
Checksums-Sha256:
 98b448d09827c4a1ddddd479d75e98b6e421841f811ea8b2a85fd4102cb890a7 3934 poppler_25.03.0-4.dsc
 8ce6c78f873b0d0b01579d78d50e2c84610cc0199da5543b1656906a28597f8b 41296 poppler_25.03.0-4.debian.tar.xz
 90d6c1234bb0415e1573875bfc6c732825d2d3db3c6a35eaaf990de42de2680e 16732 poppler_25.03.0-4_source.buildinfo
Files:
 b91ad1b17fd4b662d31403b07c09cdbf 3934 devel optional poppler_25.03.0-4.dsc
 eb18ea5cbffdf98c063aac22af536e39 41296 devel optional poppler_25.03.0-4.debian.tar.xz
 7c0835d7e9b22e9a752286a3b5633953 16732 devel optional poppler_25.03.0-4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=J5ae
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20250418/f297ee2f/attachment.sig>