This update for poppler fixes the following issues:
- CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-411=1
- openSUSE Leap 16.0:
libpoppler-cpp2-25.04.0-160000.4.1
libpoppler-devel-25.04.0-160000.4.1
libpoppler-glib-devel-25.04.0-160000.4.1
libpoppler-glib8-25.04.0-160000.4.1
libpoppler-qt5-1-25.04.0-160000.4.1
libpoppler-qt5-devel-25.04.0-160000.4.1
libpoppler-qt6-3-25.04.0-160000.4.1
libpoppler-qt6-devel-25.04.0-160000.4.1
libpoppler148-25.04.0-160000.4.1
poppler-tools-25.04.0-160000.4.1
typelib-1_0-Poppler-0_18-25.04.0-160000.4.1
* bsc#1252337
References:
* https://www.suse.com/security/cve/CVE-2025-11896.html
Get the latest Linux and open source security news straight to your inbox.