[CLSA-2026:1787732795] Fix CVE(s): CVE-2020-23804, CVE-2025-32365
Type:
security
Severity:
Important
Release date:
2026-08-26 08:26:47 UTC
Description:
* SECURITY UPDATE: out-of-bounds read in JBIG2Bitmap::combine() (JBIG2Stream.cc) via a crafted JBIG2 stream, from a misplaced isOk check - debian/patches/CVE-2025-32365.patch: add the isOk() guard at the top of JBIG2Bitmap::combine() so every caller is protected against out-of-bounds reads on a not-OK bitmap (upstream commit 1f151565, adapted to poppler 0.62 GBool/Guint) - CVE-2025-32365 * SECURITY UPDATE: uncontrolled recursion / stack overflow in the XRefStm chain parser (XRef.cc) via a crafted PDF, causing denial of service - debian/patches/CVE-2020-23804.patch: cap the XRefStm chain at 4096 entries in XRef::readXRefTable() to stop the readXRef/readXRefTable recursion from exhausting the stack on crafted PDFs (upstream commit ec8a43c8) - CVE-2020-23804
CVEs fixed:
Updated packages:
  • gir1.2-poppler-0.18_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:192f0b2a125a70f8c968d9f308b4b6047765ae28
  • libpoppler-cpp-dev_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:c24354a2ee4ee843a49609e8005f512fb61c0218
  • libpoppler-cpp0v5_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:0e98f30cc8270a440353d3fb8af6cf455a38d136
  • libpoppler-dev_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:846aa28d9e01be53875f191a5cee7d5f5111a206
  • libpoppler-glib-dev_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:d9ccb63f0cfad4ad38c42014aa8f845440832cc3
  • libpoppler-glib-doc_0.62.0-2ubuntu2.14+tuxcare.els2_all.deb
    sha:113ec607c3b53603a7a4f26d93ade5419439e284
  • libpoppler-glib8_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:beee2ffa58973e582c5b65c5a767e7ffe4d656ea
  • libpoppler-private-dev_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:3db05485742378b7fb9590af64dff533b1822162
  • libpoppler-qt5-1_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:1deadc16229133310c6bb628746c9d0ca11ab418
  • libpoppler-qt5-dev_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:8fe1ea677f4ba6a8b374eee17058947d1e715a84
  • libpoppler73_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:a7e5059b68a48c3b6678b0d4ad5be2fddb114821
  • poppler-utils_0.62.0-2ubuntu2.14+tuxcare.els2_amd64.deb
    sha:522410e99b65e528fa59539af7469892780c7c92
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.