openSUSE-SU-2026:20397-1

Опубликовано: 19 мар. 2026

Источник: suse-cvrf

Описание

Security update for poppler

This update for poppler fixes the following issues:

CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).

libpoppler-cpp2-25.04.0-160000.4.1

libpoppler-devel-25.04.0-160000.4.1

libpoppler-glib-devel-25.04.0-160000.4.1

libpoppler-glib8-25.04.0-160000.4.1

libpoppler-qt5-1-25.04.0-160000.4.1

libpoppler-qt5-devel-25.04.0-160000.4.1

libpoppler-qt6-3-25.04.0-160000.4.1

libpoppler-qt6-devel-25.04.0-160000.4.1

libpoppler148-25.04.0-160000.4.1

poppler-tools-25.04.0-160000.4.1

typelib-1_0-Poppler-0_18-25.04.0-160000.4.1

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

openSUSE Leap 16.0:libpoppler-cpp2-25.04.0-160000.4.1

openSUSE Leap 16.0:libpoppler-devel-25.04.0-160000.4.1

openSUSE Leap 16.0:libpoppler-glib-devel-25.04.0-160000.4.1

openSUSE Leap 16.0:libpoppler-glib8-25.04.0-160000.4.1