Opened 12 months ago

Closed 12 months ago

Last modified 8 months ago

#22224 closed enhancement (fixed)

poppler-25.10.0

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New monthly version.

Change History (7)

comment:1 by Bruce Dubbs, 12 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 12 months ago

Release 25.10.0

core:

  • Fix image signature getting lost
  • Don't embed substitutions for base14 fonts
  • Form font improvements
  • Handle signatures padded with random data
  • Add feature to Ink annotation to render with multiply blend mode
  • Internal code improvements
  • Fix crashes in malformed documents

glib:

  • Fix signature text
  • Add feature to Ink annotation to render with multiply blend mode

cpp:

  • Added embedded_file::unicodeName function

comment:3 by Bruce Dubbs, 12 months ago

Resolution: → fixed
Status: assigned → closed

Fixed at commits 

77a0f2031a Update to gegl-0.4.64.
b7472cd469 Update to poppler-25.10.0.
99d202e71b Update to gtk-doc-1.35.1.
0a690c3783 Update to hwdata-0.400.

comment:4 by Douglas R. Reno, 12 months ago

Over the weekend, a security vulnerability was announced in poppler. ​https://securitylab.github.com/advisories/GHSL-2025-042_poppler/

This was fixed in poppler-25.10.0, but reported in April. It's a use-after-free crash and was rated as Medium (the CVE number is CVE-2025-52885).

comment:5 by Douglas R. Reno, 12 months ago

Priority: normal → elevated

comment:6 by Douglas R. Reno, 12 months ago

SA-12.4-020 issued

comment:7 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.