Bug 34485 - poppler new security issue CVE-2025-52886
Summary: poppler new security issue CVE-2025-52886
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2025-07-18 15:27 CEST by Nicolas Salguero
Modified: 2025-07-25 23:49 CEST (History)
4 users (show)

See Also:
Source RPM: poppler-23.02.0-1.6.mga9.src.rpm
CVE: CVE-2025-52886
Status comment: Fixed upstream in 25.06.0


Attachments

Description Nicolas Salguero 2025-07-18 15:27:45 CEST
CVE-2025-52886 was announced here:
https://www.openwall.com/lists/oss-security/2025/07/11/5

Poc:
https://www.openwall.com/lists/oss-security/2025/07/12/1
Nicolas Salguero 2025-07-18 15:28:32 CEST

Source RPM: (none) => poppler-25.04.0-2.mga10.src.rpm, poppler-23.02.0-1.6.mga9.src.rpm
CVE: (none) => CVE-2025-52886
Whiteboard: (none) => MGA9TOO
Status comment: (none) => Fixed upstream in 25.06.0

Comment 1 Lewis Smith 2025-07-20 21:32:20 CEST
Assigning globally as different packagers commit poppler.

Assignee: bugsquad => pkg-bugs

Comment 2 Jani Välimaa 2025-07-23 23:10:13 CEST
Fixed in cauldron with poppler-25.07.0-1.mga10.

Version: Cauldron => 9
CC: (none) => jani.valimaa
Whiteboard: MGA9TOO => (none)
Source RPM: poppler-25.04.0-2.mga10.src.rpm, poppler-23.02.0-1.6.mga9.src.rpm => poppler-23.02.0-1.6.mga9.src.rpm

Comment 3 Jani Välimaa 2025-07-23 23:41:05 CEST
Pushed poppler-23.02.0-1.7.mga9 to core/updates_testing.

SRPMS:
poppler-23.02.0-1.7.mga9

RPMS:
poppler-23.02.0-1.7.mga9
lib(64)poppler126-23.02.0-1.7.mga9
lib(64)poppler-devel-23.02.0-1.7.mga9
lib(64)poppler-cpp0-23.02.0-1.7.mga9
lib(64)poppler-qt5-devel-23.02.0-1.7.mga9
lib(64)poppler-qt5_1-23.02.0-1.7.mga9
lib(64)poppler-qt6-devel-23.02.0-1.7.mga9
lib(64)poppler-qt6_3-23.02.0-1.7.mga9
lib(64)poppler-glib8-23.02.0-1.7.mga9
lib(64)poppler-gir0.18-23.02.0-1.7.mga9
lib(64)poppler-glib-devel-23.02.0-1.7.mga9
lib(64)poppler-cpp-devel-23.02.0-1.7.mga9

Assignee: pkg-bugs => qa-bugs

Comment 4 katnatek 2025-07-24 00:40:22 CEST
RH x86_64

Run the POC, use pdftohtml poc.pdf, I not wait until the overflow but is clear to me that something is rotten the use of memory keep growing


installing lib64poppler-qt6_3-23.02.0-1.7.mga9.x86_64.rpm lib64poppler-qt5_1-23.02.0-1.7.mga9.x86_64.rpm lib64poppler-glib8-23.02.0-1.7.mga9.x86_64.rpm poppler-23.02.0-1.7.mga9.x86_64.rpm lib64poppler126-23.02.0-1.7.mga9.x86_64.rpm lib64poppler-cpp0-23.02.0-1.7.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
      1/6: lib64poppler126       ##################################################################################################
      2/6: lib64poppler-qt6_3    ##################################################################################################
      3/6: lib64poppler-qt5_1    ##################################################################################################
      4/6: lib64poppler-glib8    ##################################################################################################
      5/6: poppler               ##################################################################################################
      6/6: lib64poppler-cpp0     ##################################################################################################
      1/6: removing lib64poppler-cpp0-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################
      2/6: removing poppler-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################
      3/6: removing lib64poppler-glib8-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################
      4/6: removing lib64poppler-qt5_1-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################
      5/6: removing lib64poppler-qt6_3-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################
      6/6: removing lib64poppler126-23.02.0-1.6.mga9.x86_64
                                 ##################################################################################################

Run again pdftohtml poc.pdf

Get a lot of
Syntax Error: Page annotations object (page 1) is likely malformed. Too big: (16777216)
Before get
Syntax Error: Failed to create page (page 1)

In just seconds

strace okular file.pdf shows

openat(AT_FDCWD, "/lib64/libpoppler-qt5.so.1", O_RDONLY|O_CLOEXEC) = 17

strace qpdfview file.pdf shows
openat(AT_FDCWD, "/lib64/libpoppler-qt6.so.3", O_RDONLY|O_CLOEXEC) = 18

Looks good to me
katnatek 2025-07-24 00:45:15 CEST

Keywords: (none) => advisory

Comment 5 Herman Viaene 2025-07-24 11:48:49 CEST
MGA9-64 server Plasma wayland on Compaq H000SB
No installation issues.
Tests from bug 32242:
$ pdftohtml handleidingVM.pdf testpoppler.html
Page-1
Page-2
Page-3
Page-4
Page-5
Page-6
Page-7
Page-8
Page-9
 link to page 6 Page-10
Page-11
Page-12
$ firefox testpoppler.html
Opens correctly with a page index as a lefthand column of links and the text and graphics to the right.
$ pdftotext handleidingVM.pdf VM.txt
Opened with pluma and text is complete with indicators where graphical items occured in the original document. These indicators are not shown in kwrite.
From bug 32600
$ pdfimages handleidingVM.pdf handvm
$ ls handvm*
handvm-000.ppm  handvm-002.ppm  handvm-004.ppm  handvm-006.ppm
handvm-001.ppm  handvm-003.ppm  handvm-005.ppm  handvm-007.ppm
$ ls ha*.ppm | wc -l
8
$ pdfseparate -f 3 -l 10 handleidingVM.pdf page_%d
$ okular page_*
pages show up OK.
With tests from Comment 4 above, this should be good for OK.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA9-64-OK

Comment 6 Thomas Andrews 2025-07-25 15:32:35 CEST
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 7 Mageia Robot 2025-07-25 23:49:16 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0214.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.