Package Release Info

poppler-qt6-24.03.0-150600.3.24.1

Update Info: SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3779
Available in Package Hub : 15 SP7 Subpackages Updates

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libpoppler-qt6-3
libpoppler-qt6-devel

Change Logs

* Tue Oct 14 2025 pgajdos@suse.com
- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch
* Mon Oct 06 2025 pgajdos@suse.com
- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch
Version: 24.03.0-150600.3.19.1
* Tue Aug 05 2025 pgajdos@suse.com
- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch
Version: 24.03.0-150600.3.16.1
* Fri Jul 04 2025 pgajdos@suse.com
- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch
Version: 24.03.0-150600.3.13.1
* Fri Apr 25 2025 pgajdos@suse.com
- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch
Version: 24.03.0-150600.3.10.1
* Mon Apr 07 2025 pgajdos@suse.com
- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch
* Tue Mar 25 2025 pgajdos@suse.com
- build with PIE [bsc#1239939]