UbuntuUpdates.org

Package "poppler"

Name: poppler

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • PDF rendering library (Qt 5 based shared library)
  • PDF rendering library -- development files (Qt 5 interface)
  • PDF rendering library (Qt 6 based shared library)
  • PDF rendering library -- development files (Qt 6 interface)
Latest version: 26.07.0-2ubuntu1.1
Release: stonking (26.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "poppler" in Stonking

Repository Area Version
base universe 26.07.0-2ubuntu1
base main 26.07.0-2ubuntu1
security main 26.07.0-2ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 26.07.0-2ubuntu1.1 2026-10-21 19:19:52 UTC

poppler (26.07.0-2ubuntu1.1) stonking-security; urgency=medium

  * SECURITY UPDATE: stack overflow via long password
    - debian/patches/CVE-2026-107705.patch: Decrypt: Properly apply password
      length limit in poppler/Decrypt.cc.
    - CVE-2026-107705

 -- Marc Deslauriers Thu, 15 Oct 2026 14:17:01 -0400
CVE-2026-107705 Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to o


About   -   Send Feedback to @ubuntu_updates