Accepting request 1323155 from X11:common:Factory

OBS-URL: https://build.opensuse.org/request/show/1323155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/poppler?expand=0&rev=221

poppler-25.08.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:425ed4d4515a093bdcdbbaac6876f20617451edc710df6a4fd6c45dd67eb418d
-size 1975316

poppler-25.08.0.tar.xz.sig

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEyiYsbIPeTS+yijMqOmpNuDnqptcFAmiPlqMACgkQOmpNuDnq
-pteR9xAAmaaN4eJjIh5lMZufOQGFTcyCd8261lpC7GS3zuKhUU5pJ4JgM9P11QDG
-vbdP8CyQtwypx4gwTk8E9AYab2yaerOInJhOfxPqM6g62Ci8FbdZai2cS4FxbYiW
-ZVi1aVOeXAuY0O3Ff5sXRD1pV8sNVINLXtuNVD0C6JVP5fdXKOAL2dX2CsCC5cjN
-GtLhs9ibiX8zyPjTgOS7Hg//iGiXuUjY+IC/W6vnaU/97pf7qhDm7CstqAaUO447
-0fJkMZSeVwdSUmcHpW4F5Om3PiAY+9DRs8SlonaMrdHruBV67f03xU2ZAnJQ4615
-JpJG5iYADCNZ9QjQgtZZ2d5pkyHWfPyjjfjjFnRnfvGYWQJZsLV1bcXNo+NvjCAK
-DTnyLPp15NKXighBXGKB5ffa4hPbhiC+WpQ++2k83bkELlIrFw61xib2L4CpNCl4
-ZcJ0kNBmgKMmS4dIyu2FB5a2BJMGY8JUvdo834U167ne8ZrdlTFIXWsF/sScIVhs
-3u7xuLuhpOEXIBApH7riicX87utjPNv56c9tEn2YqRf6VxgyYjX7Yn1rQSvN39sW
-PdA1Wx6dkB9sXkoePniC6C6rEbrSen37TalWGR7MwGzrPxAx2VQGr7xrl7CiZ7zf
-hDaNn7/NMiLOV/MfyJ1gppxXN5t9vbaPcrwPmfyUTaa+4HwBVs8=
-=6g5w
------END PGP SIGNATURE-----

poppler-25.12.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c18b40eb36b1a0c5b86e29ca054bf0770304583da4f2cdd42fe86eca6a20de48
+size 1992456

poppler-25.12.0.tar.xz.sig

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=cTzK
+-----END PGP SIGNATURE-----

poppler.changes

@@ -1,3 +1,82 @@
+-------------------------------------------------------------------
+Tue Dec  9 14:12:46 UTC 2025 - Petr Gajdos <pgajdos@suse.com>
+
+- version update to 25.12.0:
+        core:
+         * Be less strict about the Page Annots object being correct. Issue #1641
+         * Fix rendering of some annotations. Issue #1642
+         * TextOuputDev: change default line ending to \n
+         * Splash: Performance improvements
+         * Ignore color operators when painting a Type3 font with d1
+         * Internal code improvements
+         * Fix crashes in malformed documents
+         * NSS Signatures: Tweak the logic that decides which firefox profile to use
+         * NSS Signatures: call PORT_GetError() only if the preceding CERT_PKIXVerifyCert() fails
+         * Splash: Performance improvements
+         * Fix crashes in malformed documents
+         * Fix image signature getting lost
+         * Don't embed substitutions for base14 fonts
+         * Form font improvements
+         * Handle signatures padded with random data
+         * Add feature to Ink annotation to render with multiply blend mode
+         * Internal code improvements
+         * Fix crashes in malformed documents
+        utils:
+         * pdfsig: specify search order for NSS certificate database on the man page
+        build system:
+         * Switch to C++23
+        glib:
+         * Fix ocsp check for signatures validation
+         * Fix warning when running glib-mkenums
+         * Fix signature text
+         * Add feature to Ink annotation to render with multiply blend mode
+        cpp:
+         * Added embedded_file::unicodeName function
+- fixes CVE-2025-11896 [bsc#1252337]
+        CVE-2025-52885 [bsc#1251940]
+  (removed poppler-CVE-2025-11896.patch and poppler-CVE-2025-52885.patch)
+
+-------------------------------------------------------------------
+Tue Dec  9 09:45:39 UTC 2025 - Petr Gajdos <pgajdos@suse.com>
+
+- security update
+- added patches
+  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
+  * poppler-CVE-2025-11896.patch
+
+-------------------------------------------------------------------
+Sat Nov 22 21:23:26 CET 2025 - Stanislav Brabec <sbrabec@suse.com>
+
+- Remove unused BuildRequires: update-desktop-files.
+
+-------------------------------------------------------------------
+Tue Oct 14 09:19:40 UTC 2025 - pgajdos@suse.com
+
+- security update
+- added patches
+  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
+  * poppler-CVE-2025-52885.patch
+
+-------------------------------------------------------------------
+Wed Sep 10 08:05:24 UTC 2025 - pgajdos@suse.com
+
+- version update to 25.09.1:
+  * Speed improvements when reusing the same document with different output devices
+  * Speed improvements when reading from network file systems
+  * Internal code improvements
+  * Fix generated .pc files when using old gpgme
+- version update to 25.09.0:
+  * Speed improvements when reusing the same document with different output devices
+  * Speed improvements when reading from network file systems
+  * Internal code improvements
+  * Fix crashes in malformed documents
+  * fix ODR issue with enum
+  * pdftohtml: Fix text positioning. (Regressed in 25.07.0)
+  * Better pkgconfig support for static builds
+- deleted patches
+  * reduce-boost-required-version.patch (upstreamed)
+  * reduce-libtiff-required-version.patch (upstreamed)
+
 -------------------------------------------------------------------
 Tue Aug  5 09:57:10 UTC 2025 - pgajdos@suse.com
 

poppler.spec

@@ -1,6 +1,7 @@
 #
 # spec file for package poppler
 #
+# Copyright (c) 2025 SUSE LLC
 # Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
@@ -24,7 +25,7 @@
 %endif
 # Actual version of poppler-data:
 %define poppler_data_version 0.4.11
-%define poppler_sover 152
+%define poppler_sover 155
 %define poppler_cpp_sover 2
 %define poppler_glib_sover 8
 %define poppler_qt5_sover 1
@@ -32,7 +33,7 @@
 %define poppler_api 0.18
 %define poppler_apipkg 0_18
 Name:           poppler%{?psuffix}
-Version:        25.08.0
+Version:        25.12.0
 Release:        0
 Summary:        PDF Rendering Library
 License:        GPL-2.0-only OR GPL-3.0-only
@@ -42,8 +43,6 @@ Source:         %{url}/%{sname}-%{version}.tar.xz
 Source1:        %{url}/%{sname}-%{version}.tar.xz.sig
 Source90:       poppler.keyring
 Source99:       baselibs.conf
-Patch0:         reduce-boost-required-version.patch
-Patch1:         reduce-libtiff-required-version.patch
 
 BuildRequires:  cmake >= 3.10
 BuildRequires:  gtk-doc
@@ -51,7 +50,6 @@ BuildRequires:  libboost_headers-devel >= 1.66
 BuildRequires:  libgpgmepp-devel >= 1.19
 BuildRequires:  openjpeg2
 BuildRequires:  pkgconfig
-BuildRequires:  update-desktop-files
 BuildRequires:  pkgconfig(cairo) >= 1.10.0
 BuildRequires:  pkgconfig(cairo-ft)
 BuildRequires:  pkgconfig(cairo-pdf)

reduce-boost-required-version.patch

@@ -1,13 +0,0 @@
-Index: poppler-25.06.0/CMakeLists.txt
-===================================================================
---- poppler-25.06.0.orig/CMakeLists.txt
-+++ poppler-25.06.0/CMakeLists.txt
-@@ -232,7 +232,7 @@ add_definitions(-DQT_NO_KEYWORDS)
- # Check for Cairo rendering backend
- macro_optional_find_package(Cairo ${CAIRO_VERSION})
- 
--find_package(Boost 1.74.0 CONFIG)
-+find_package(Boost 1.66.0 CONFIG)
- if(Boost_FOUND)
-   set(USE_BOOST_HEADERS ON)
- elseif(ENABLE_BOOST)

reduce-libtiff-required-version.patch

@@ -1,13 +0,0 @@
-Index: poppler-25.06.0/CMakeLists.txt
-===================================================================
---- poppler-25.06.0.orig/CMakeLists.txt
-+++ poppler-25.06.0/CMakeLists.txt
-@@ -169,7 +169,7 @@ endmacro()
- 
- find_soft_mandatory_package(ENABLE_NSS3 NSS3 3.68)
- find_soft_mandatory_package(ENABLE_GPGME Gpgmepp 1.19)
--find_soft_mandatory_package(ENABLE_LIBTIFF TIFF 4.3)
-+find_soft_mandatory_package(ENABLE_LIBTIFF TIFF 4.0.9)
- 
- macro_optional_find_package(JPEG)
- macro_optional_find_package(PNG)