-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 18 Apr 2025 18:16:32 -0400
Source: poppler
Built-For-Profiles: noudeb
Architecture: source
Version: 25.03.0-4
Distribution: unstable
Urgency: high
Maintainer: Debian freedesktop.org maintainers <
pkg-freedesktop-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <
jbicha@ubuntu.com>
Closes: 1103545
Changes:
poppler (25.03.0-4) unstable; urgency=high
.
* Team upload
* SECURITY UPDATE: Properly verify abde.pkcs7.sha1 signatures
- Cherry-pick upstream fix for the
NSSSignatureVerification::validateSignature function
in NSSCryptoSignBackend.cc
- CVE-2025-43903 (Closes: #1103545)
Checksums-Sha1:
0924ee7042db3886c9619362b5cf78612aa4808e 3934 poppler_25.03.0-4.dsc
7d40fe16b1e4f9dbc18a70f1d6fb60eddbadd3a4 41296 poppler_25.03.0-4.debian.tar.xz
46e2c0e8cc9526e734725897274db75bbe07e51a 16732 poppler_25.03.0-4_source.buildinfo
Checksums-Sha256:
98b448d09827c4a1ddddd479d75e98b6e421841f811ea8b2a85fd4102cb890a7 3934 poppler_25.03.0-4.dsc
8ce6c78f873b0d0b01579d78d50e2c84610cc0199da5543b1656906a28597f8b 41296 poppler_25.03.0-4.debian.tar.xz
90d6c1234bb0415e1573875bfc6c732825d2d3db3c6a35eaaf990de42de2680e 16732 poppler_25.03.0-4_source.buildinfo
Files:
b91ad1b17fd4b662d31403b07c09cdbf 3934 devel optional poppler_25.03.0-4.dsc
eb18ea5cbffdf98c063aac22af536e39 41296 devel optional poppler_25.03.0-4.debian.tar.xz
7c0835d7e9b22e9a752286a3b5633953 16732 devel optional poppler_25.03.0-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmgCz3oACgkQ5mx3Wuv+ bH0o8Q//R08kRWmv/ZWWV6LwYZ+kmLP5fR3bZsebe+Ovd0Jb8wVCTNQhRUoVqwii dR8HfsocvE1a15UC3qLvgDTxnkDWd0774cYGzwjvw3ypp7Dy/2Jg+hktqZPSDYQG j1U6kXkS1l8twpCCbghkiky6wWBPZREmhejmBFBnar9ZIyU3trp32wkIKfbH19Nz DFYYQmIenh1CmbViCRobcZ235pwa9KwzoV4m89ydM5aJFeLZV7oASGse6YVfgGmE 9O06SofxGEkpOJ61Fj8lgZY3tUcTVk7Z6iehhWEQefVvKxA2fVXZl2HOTiISrXlB jG8etlFPJ/uP1Y8QJLRUeyLzGLzakdCRxQ0blNoUKOd8Yc2bqRnlfypJfqycpO74 Lbiay/flD/GVQ/1Q8FDmiQiWpY32s+I/ilgkx0Ui3HpN9y12BaYvxZX5/UjCaK11 Kej+WZ5d1o8Fa34tWid2YNKzOQekCarRzfuxtsbP9a+WHEoVZeYxjWVKgDv+y63H t3xPS4RAnA1JkVWt4gz4epbwZkXqMVwILupJHdX1RIkjKvqrhN1lCewrA6+hFntr nwx86+K0CZj/eZEC7tUjCYutoZkPkifmeu08LCL8jM4AorM5/SsuY8kHO97J6ldt wY0wsvo2uG9XwXEd16OrFriRcGsv7d24ae0jXH+zpreu6aVrUf8=
=J5ae
-----END PGP SIGNATURE-----
--==============s20192784197599023=Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaALTpQAKCRCb9qggYcy5 IcZZAP99WWqa2Yvl7Cco/vmSVKKNZNr0P3CVV2eFTee3uOFYfAEA/UhP0eN193xr dVg23BNQH0HZ+yPrNh3NUDSXwKW7nAU=/zSl
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)