UbuntuUpdates.org

Package "poppler"

Name: poppler

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • PDF rendering library (Qt 5 based shared library)
  • PDF rendering library -- development files (Qt 5 interface)
  • PDF rendering library (Qt 6 based shared library)
  • PDF rendering library -- development files (Qt 6 interface)
Latest version: 26.01.0-2ubuntu0.2
Release: resolute (26.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "poppler" in Resolute

Repository Area Version
base universe 26.01.0-2build2
base main 26.01.0-2build2
security main 26.01.0-2ubuntu0.3
security universe 26.01.0-2ubuntu0.3
updates main 26.01.0-2ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 26.01.0-2ubuntu0.2 2026-10-08 01:08:15 UTC

poppler (26.01.0-2ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts
    - debian/patches/CVE-2026-102620.patch: Fix integer overflow in
      FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc.
    - CVE-2026-102620
  * SECURITY UPDATE: overflow in SplashClip::clipToPath
    - debian/patches/CVE-2026-102621.patch: Fix integer overflow in
      SplashClip::clipToPath in splash/SplashClip.cc.
    - CVE-2026-102621
  * SECURITY UPDATE: null pointer deref issue
    - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in
      poppler/JBIG2Stream.cc.
    - CVE-2026-93312
  * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg
    - debian/patches/CVE-2026-93313.patch: Fix integer overflow in
      JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc.
    - CVE-2026-93313
  * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID
    - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve
      b*12 overflow check in fofi/FoFiTrueType.cc.
    - CVE-2026-93314

 -- Marc Deslauriers Tue, 06 Oct 2026 11:08:22 -0400
Source diff to previous version
CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFi
CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc
CVE-2026-93312 A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulat
CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG
CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc.

Version: 26.01.0-2ubuntu0.1 2026-06-08 17:07:46 UTC

  poppler (26.01.0-2ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: integer overflow in Splash backend
    - debian/patches/CVE-2026-10118.patch: SplashOutputDev: Fix integer overflow
      in tilingPatternFill in poppler/SplashOutputDev.cc.
    - CVE-2026-10118

 -- Marc Deslauriers <email address hidden> Thu, 04 Jun 2026 10:01:24 -0400
CVE-2026-10118 A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered


About   -   Send Feedback to @ubuntu_updates