#1106143 libpoppler126: crash when verifying incomplete PDF signatures using NSS

Package:
libpoppler126
Source:
libpoppler126
Description:
PDF rendering library
Submitter:
Juraj Šarinay
Date:
2025-05-20 08:21:02 UTC
Severity:
normal
#1106143#5
Date:
2025-05-20 08:07:38 UTC
From:
To:
Dear Maintainer,

when opening a signed PDF with empty SignedData.digestAlgorithms,
poppler crashes due to nullptr dereference. See the attached bad-empty-
digestalgorithms.pdf

The issue has been fixed upstream since 24.01.0:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/afaddf1be66aed2931a146bb6555225c82cceacd

Best,
Juraj