1. Forum
  2. Usenet
  3. LINUX.DEBIAN.CHANGES.DEVE

  • Accepted poppler 25.03.0-3 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Mon Apr 7 17:40:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 07 Apr 2025 11:11:10 -0400
    Source: poppler
    Built-For-Profiles: noudeb
    Architecture: source
    Version: 25.03.0-3
    Distribution: unstable
    Urgency: high
    Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org>
    Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
    Closes: 1102190 1102191
    Launchpad-Bugs-Fixed: 2106404
    Changes:
    poppler (25.03.0-3) unstable; urgency=high
    .
    * Team upload
    * SECURITY UPDATE: floating-point exception vulnerability (Closes: #1102190)
    - Cherry-pick upstream fix for the PSStack::roll function
    in Function.cc
    - CVE-2025-32364
    * SECURITY UPDATE: out-of-bounds read vulnerability (Closes: #1102191)
    - Cherry-pick upstream fix for the JBIG2Bitmap::combine function
    in JBIG2Stream.cc (LP: #2106404)
    - CVE-2025-32365
    Checksums-Sha1:
    baca1fae9ce2e401afbfa3b25b0899aa17fec319 3934 poppler_25.03.0-3.dsc
    fe819d0fb836f79a176656aea56b944fba779cd3 40588 poppler_25.03.0-3.debian.tar.xz
    0b4a64156fa522dafa0d03afd4acdbb3a6e5818d 16762 poppler_25.03.0-3_source.buildinfo
    Checksums-Sha256:
    160dc0ad33758ca34ceb29283c6cab14f79b8034c4afee3034a4154557c9d90a 3934 poppler_25.03.0-3.dsc
    57f8c465d70450c204ceb0d794bdc2846431c4faf3bd861ec108866fea158c4e 40588 poppler_25.03.0-3.debian.tar.xz
    f7fabd3cbf406c27acf82bf747c4df0943b7d852a0ac42eea5b1883306d15c8d 16762 poppler_25.03.0-3_source.buildinfo
    Files:
    9ec300749a2c4aa8cfd5372e64fb7f1a 3934 devel optional poppler_25.03.0-3.dsc
    bf32c70c2ef604d71852f56c03dcf9e0 40588 devel optional poppler_25.03.0-3.debian.tar.xz
    78ca2045cef78a229b8803534c27f833 16762 devel optional poppler_25.03.0-3_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmfz7hoACgkQ5mx3Wuv+ bH2fMA//Ulou2CydTb6hyFyN9hDNN1C3sLU52n8hCq8LbqHjiFWBIMCQJ3KPM3W3 s6/KS0YqCjB5WVoWO89nHamQdQpYW1RpFzHFQfhc9MFjTs3XnRG/p+X8K3jqnL/v YYqD/0ZqI4a43BT1JxrexTvgN+PLZcPSUPZKbIcOyTDiZrykMUR+ON26X4NutEQ2 NkuzR17cw3WbFqCRYd9SqLd8nJr67fG67avFUz1bjGDvgjQ4SafB7BKykR3BnTm4 rSyz4ZPP4sSonbAHzbM567N2hdxUKd4xnVYkAsb1YpHb9r3WTLFNDEYk3HPV8QdM vQxrUe5Qla9ZtRq0CR4/2GiuNDT1nl0kyD1EyuZ4F06k/meqz3S6JPyB4wVIzxgP ze2bsQwNtIqpHxTeQYo4ff/kDCl4sobV3VH45DC8cx6IRlDR/nQLIiXtKzoJLQhQ 4BN+v9FNQCoe4HyHnVUDky2KoLUrNMub66oUpwc3sv3MUS2p38daBcwh/UZ8rndf HiJilQk1BjCvCt3aU1ZJVch+pgqv00ErsDTaqHz17SzCDiBkHqPOM7FGwltTS6SS o7t7y4kWHh3qds8SpZE/l9LoSSbwGyLV8SMwsoJvAgMcfBN7yY0ELkqL9NV0bLz7 2aigan+AxypRfwMjzrkTzgC440bsVGhwtVtUq0gdJ1S/gm9nRtg=
    =tEBl
    -----END PGP SIGNATURE-----


    --==============P02174231892432131=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZ/PxXQAKCRCb9qggYcy5 IcmNAQCcKPT0plEFeKyjta8ESTSv2jyvalrKmOTL40HBUC//kgEA2DS2watc8/m+ +y281pcfKPtCrb2okfOL4Iy4QmmZ6As=vVPR
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)