poppler (22.02.0-2ubuntu0.13) jammy-security; urgency=medium

  * SECURITY UPDATE: integer overflow in Splash backend
    - debian/patches/CVE-2026-10118.patch: SplashOutputDev: Fix integer overflow
      in tilingPatternFill in poppler/SplashOutputDev.cc.
    - CVE-2026-10118

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 04 Jun 2026 10:47:37 -0400

poppler (22.02.0-2ubuntu0.12) jammy-security; urgency=medium

  * SECURITY UPDATE: User after free
    - debian/patches/CVE-2025-52885.patch: check for duplicate
      entries in poppler/StructTreeRoot.cc.
    - CVE-2025-52885

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Mon, 03 Nov 2025 08:08:58 -0300

poppler (22.02.0-2ubuntu0.11) jammy-security; urgency=medium

  * SECURITY UPDATE: stack consumption via metadata
    - debian/patches/CVE-2025-43718.patch: make sure regex doesn't stack
      overflow by limiting it in poppler/PDFDoc.cc.
    - CVE-2025-43718

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 03 Oct 2025 07:37:01 -0400

poppler (22.02.0-2ubuntu0.10) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2025-50420.patch: don't continue
      recursing in PDFDoc in poppler/PDFDoc.cc.
    - CVE-2025-50420

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Tue, 12 Aug 2025 13:21:56 -0300

poppler (22.02.0-2ubuntu0.9) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via reference count overflow
    - debian/patches/CVE-2025-52886.patch: limit amount of annots per
      document/page in poppler/Annot.cc, poppler/Page.cc.
    - CVE-2025-52886

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 25 Jul 2025 11:21:27 -0400

poppler (22.02.0-2ubuntu0.8) jammy-security; urgency=medium

  * SECURITY UPDATE: signature validation
    - debian/patches/CVE-2025-43903.patch: Properly verify adbe.pkcs7.sha1
      signatures.
    - CVE-2025-43903

 -- Fabian Toepfer <fabian.toepfer@canonical.com>  Thu, 24 Apr 2025 14:59:10 +0200

poppler (22.02.0-2ubuntu0.7) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via floating point exception
    - debian/patches/CVE-2025-32364.patch: protect against doing int =
      -INT_MIN in poppler/Function.cc.
    - CVE-2025-32364
  * SECURITY UPDATE: DoS in JBIG2Bitmap::combine function
    - debian/patches/CVE-2025-32365.patch: move isOk check to inside
      JBIG2Bitmap::combine in poppler/JBIG2Stream.cc.
    - CVE-2025-32365

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 07 Apr 2025 12:59:39 -0400

poppler (22.02.0-2ubuntu0.6) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds read in pdf file parsing.
    - debian/patches/CVE-2024-56378.patch: Add checks to unlikely and destPtr
      in poppler/JBIG2Stream.cc.
    - CVE-2024-56378

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 14 Jan 2025 12:44:37 -0330

poppler (22.02.0-2ubuntu0.5) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-6239.patch: fix crash in broken
      documents when using -dests in utils/pdfinfo.c.
    - CVE-2024-6239

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Thu, 27 Jun 2024 14:11:16 -0300

poppler (22.02.0-2ubuntu0.4) jammy; urgency=medium

  * Add fix-invisible-form-fields.patch:
    - Pick upstream fix for a regression making fields invisible
      (LP: #1980836)

 -- Timo Jyrinki <timo-jyrinki@ubuntu.com>  Wed, 17 Apr 2024 14:49:37 +0300

# For older changelog entries, run 'apt-get changelog libpoppler118'
