diff --git a/backport-CVE-2025-52885.patch b/backport-CVE-2025-52885.patch new file mode 100644 index 0000000000000000000000000000000000000000..a89ae0040bf8bd4e5407e038069acdbb2fdbd9fd --- /dev/null +++ b/backport-CVE-2025-52885.patch @@ -0,0 +1,29 @@ +From 4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0 Mon Sep 17 00:00:00 2001 +From: Kevin Backhouse +Date: Wed, 3 Sep 2025 14:36:54 +0100 +Subject: [PATCH] Check for duplicate entries + +Reference:https://gitlab.freedesktop.org/poppler/poppler/-/commit/4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0 +Conflict:Adapt context +--- + poppler/StructTreeRoot.cc | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/poppler/StructTreeRoot.cc b/poppler/StructTreeRoot.cc +index 0c28e5e..37f62be 100644 +--- a/poppler/StructTreeRoot.cc ++++ b/poppler/StructTreeRoot.cc +@@ -140,6 +140,10 @@ void StructTreeRoot::parseNumberTreeNode(Dict *node) + } + int keyVal = key.getInt(); + std::vector& vec = parentTree[keyVal]; ++ if (!vec.empty()) { ++ error(errSyntaxError, -1, "Nums item at position {0:d} is a duplicate entry for key {1:d}", i, keyVal); ++ continue; ++ } + + Object valueArray = nums.arrayGet(i + 1); + if (valueArray.isArray()) { +-- +2.43.0 + diff --git a/poppler.spec b/poppler.spec index 4d54ee56e8b75dc97eb7883ebbb3bc049c2c5917..0d1439d4b6d7035fd64d2239f4371a5e748964f5 100644 --- a/poppler.spec +++ b/poppler.spec @@ -4,7 +4,7 @@ Summary: PDF rendering library Name: poppler Version: 0.90.0 -Release: 14 +Release: 15 License: (GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT URL: http://poppler.freedesktop.org/ Source0: http://poppler.freedesktop.org/poppler-%{version}.tar.xz @@ -31,6 +31,7 @@ Patch6013: backport-CVE-2025-32365.patch Patch6014: backport-CVE-2025-52886.patch Patch6015: backport-CVE-2025-50420.patch Patch6016: backport-CVE-2025-43718.patch +Patch6017: backport-CVE-2025-52885.patch BuildRequires: cmake BuildRequires: gcc-c++ @@ -231,6 +232,9 @@ test "$(pkg-config --modversion poppler-splash)" = "%{version}" %{_mandir}/man1/* %changelog +* Sat Oct 11 2025 lingsheng - 0.90.0-15 +- fix CVE-2025-52885 + * Thu Oct 09 2025 lingsheng - 0.90.0-14 - fix CVE-2025-43718