Search for packages
Package details: pkg:deb/debian/poppler@25.03.0-3
purl pkg:deb/debian/poppler@25.03.0-3
Tags Ghost
Next non-vulnerable version 25.03.0-4
Latest non-vulnerable version 25.03.0-4
Risk 1.9
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-gdcf-fn5r-p7d8
Aliases:
CVE-2025-43903
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.
25.03.0-4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-04-22T15:19:53.448740+00:00 Debian Importer Fixing VCID-364a-fvzj-aaah None 36.0.0
2025-04-22T09:01:32.833086+00:00 Debian Importer Affected by VCID-gdcf-fn5r-p7d8 https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-11T00:35:40.643263+00:00 Debian Importer Fixing VCID-j39n-x8uc-aaah https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-10T13:55:29.311928+00:00 Debian Importer Fixing VCID-364a-fvzj-aaah https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-10T08:43:03.985543+00:00 Debian Importer Fixing VCID-p629-bug3-s3g9 https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-09T23:56:57.847784+00:00 Debian Importer Fixing VCID-pn21-ccnx-pucg https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-09T08:23:54.497560+00:00 Debian Importer Fixing VCID-hnnx-bs3x-cyhw https://security-tracker.debian.org/tracker/data/json 36.0.0