Hi,

The following vulnerabilities were published for poppler.

CVE-2026-93312[0]:
| A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is
| the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc.
| This manipulation causes null pointer dereference. It is possible to
| initiate the attack remotely. The exploit has been published and may
| be used. Upgrading to version 26.08.0 is recommended to address this
| issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067.
| Upgrading the affected component is advised.

https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314
Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067 (poppler-26.08.0)

CVE-2026-93313[1]:
| A vulnerability was found in Freedesktop Poppler 26.07.0. The
| impacted element is the function JBIG2Stream::readCodeTableSeg of
| the file poppler/JBIG2Stream.cc. Performing a manipulation results
| in integer overflow. The attack can be initiated remotely. The
| exploit has been made public and could be used. The patch is named
| eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is
| recommended to deploy a patch.

https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1760
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2322
Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/eb87cf711563894649bd0c365baa479401dc6d51

CVE-2026-93314[2]:
| A vulnerability was determined in Freedesktop Poppler 26.07.0. This
| affects the function FoFiTrueType::mapCodeToGID of the file
| fofi/FoFiTrueType.cc. Executing a manipulation of the argument
| segCnt can lead to integer overflow. The attack can be launched
| remotely. The exploit has been publicly disclosed and may be
| utilized. This patch is called
| ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to
| implement a patch to correct this issue.

https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315
Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a (poppler-26.08.0)


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-93312
https://www.cve.org/CVERecord?id=CVE-2026-93312
[1] https://security-tracker.debian.org/tracker/CVE-2026-93313
https://www.cve.org/CVERecord?id=CVE-2026-93313
[2] https://security-tracker.debian.org/tracker/CVE-2026-93314
https://www.cve.org/CVERecord?id=CVE-2026-93314

Please adjust the affected versions in the BTS as needed.

We believe that the bug you reported is fixed in the latest version of
poppler, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148266@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jeremy Bícha <jbicha@ubuntu.com> (supplier of updated poppler package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 06 Oct 2026 17:58:35 +0200
Source: poppler
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 26.07.0-3
Distribution: unstable
Urgency: high
Maintainer: Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Closes: 1148266 1149697 1149698
Changes:
 poppler (26.07.0-3) unstable; urgency=high
 .
   * Team upload
 .
   [ Marc Deslauriers ]
   * SECURITY UPDATE: overflow in FoFiTrueType::cvtSfnts
     - debian/patches/CVE-2026-102620.patch: Fix integer overflow in
       FoFiTrueType::cvtSfnts in fofi/FoFiTrueType.cc.
     - CVE-2026-102620 (Closes: #1149697)
   * SECURITY UPDATE: overflow in SplashClip::clipToPath
     - debian/patches/CVE-2026-102621.patch: Fix integer overflow in
       SplashClip::clipToPath in splash/SplashClip.cc.
     - CVE-2026-102621 (Closes: #1149698)
   * SECURITY UPDATE: null pointer deref issue
     - debian/patches/CVE-2026-93312.patch: Fix nullptr + number in
       poppler/JBIG2Stream.cc.
     - CVE-2026-93312
   * SECURITY UPDATE: overflow in JBIG2Stream::readCodeTableSeg
     - debian/patches/CVE-2026-93313.patch: Fix integer overflow in
       JBIG2Stream::readCodeTableSeg in poppler/JBIG2Stream.cc.
     - CVE-2026-93313
   * SECURITY UPDATE: overflow in FoFiTrueType::mapCodeToGID
     - debian/patches/CVE-2026-93314.patch: FoFiTrueType::mapCodeToGID: Improve
       b*12 overflow check in fofi/FoFiTrueType.cc.
     - CVE-2026-93314 (Closes: #1148266)
Checksums-Sha1:
 6b8e84f29366c8a48344e8890f83fd327a42733f 3778 poppler_26.07.0-3.dsc
 21dd188c5abe5893bf743f697d456a7e6501a2a1 42544 poppler_26.07.0-3.debian.tar.xz
 cff07084aff009a1fa844c1f631f9a881059f738 8997 poppler_26.07.0-3_source.buildinfo
Checksums-Sha256:
 cb2d4e2f34d7b02f5c3d30383a5b477d22ba14314bfca7392091f6858f2c57c7 3778 poppler_26.07.0-3.dsc
 127d549f22048fb2198234f005e9eebcb6c242570e39f6829183cc9b0c4ed556 42544 poppler_26.07.0-3.debian.tar.xz
 cf13e8b296ce6e5dbb2887f52f17bcc73be47ef3e9915cf780d85f1db370710d 8997 poppler_26.07.0-3_source.buildinfo
Files:
 f0559d025982c50f56a6501ab3066aeb 3778 devel optional poppler_26.07.0-3.dsc
 b36c2a7fcdb8440d8bdfc1e99dac5ff3 42544 devel optional poppler_26.07.0-3.debian.tar.xz
 5c77e7278c58144c22d67f9574cf5579 8997 devel optional poppler_26.07.0-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=STWq
-----END PGP SIGNATURE-----