Merge poppler 23.08.0-2 (main) from Debian experimental (main)

Bug #2031572 reported by Amin Bandali
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
poppler (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Please merge poppler 23.08.0-2 (main) from Debian experimental (main)

Changelog entries since current mantic version 22.12.0-2ubuntu2:

poppler (23.08.0-2) experimental; urgency=medium

  * Team upload

  [ Jeremy Bicha ]
  * Explicitly disable gpg support for now

  [ Amin Bandali ]
  * 23.08.0 upstream release addresses CVE-2023-34872 (Closes: #1042811)
  * debian/rules: Opt into LTO (to minimize symbols diff with Ubuntu)
  * Drop most optional symbols from libpoppler-qt5-1 and libpoppler-qt6-3

 -- Amin Bandali <email address hidden> Wed, 16 Aug 2023 10:20:27 -0400

poppler (23.08.0-1) experimental; urgency=medium

  * Team upload
  * New upstream release (Closes: #969907)
  * Update library name to libpoppler130 to match soname
  * Address some lintian error and warnings:
    - E: libpoppler-private-dev: depends-on-obsolete-package
      Suggests: libfreetype6-dev => libfreetype-dev
    - W: poppler source: build-depends-on-obsolete-package
      Build-Depends: libfontconfig1-dev => libfontconfig-dev
    - W: poppler source: build-depends-on-obsolete-package
      Build-Depends: libfreetype6-dev => libfreetype-dev
  * Update standards version to 4.6.2, no changes needed
  * Update minimum version of several Build-Depends and Depends
    per upstream

 -- Amin Bandali <email address hidden> Thu, 10 Aug 2023 17:27:57 -0400

Remaining changes:
    - Don't build qt6 library on i386 since qt6 isn't available on
      Ubuntu there

Tags: patch

CVE References

Revision history for this message
Amin Bandali (bandali) wrote :
tags: added: patch
Jeremy Bícha (jbicha)
Changed in poppler (Ubuntu):
status: New → Fix Committed
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "debdiff to 23.08.0-2 in experimental" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package poppler - 23.08.0-2ubuntu1

---------------
poppler (23.08.0-2ubuntu1) mantic; urgency=medium

  * Merge from Debian experimental (LP: #2031572). Remaining change:
    - Don't build qt6 library on i386 since qt6 isn't available on
      Ubuntu there
  * Drop debian/patches/CVE-2023-34872.patch, fixed upstream.

poppler (23.08.0-2) experimental; urgency=medium

  * Team upload

  [ Jeremy Bicha ]
  * Explicitly disable gpg support for now

  [ Amin Bandali ]
  * 23.08.0 upstream release addresses CVE-2023-34872 (Closes: #1042811)
  * debian/rules: Opt into LTO (to minimize symbols diff with Ubuntu)
  * Drop most optional symbols from libpoppler-qt5-1 and libpoppler-qt6-3

poppler (23.08.0-1) experimental; urgency=medium

  * Team upload
  * New upstream release (Closes: #969907)
  * Update library name to libpoppler130 to match soname
  * Address some lintian error and warnings:
    - E: libpoppler-private-dev: depends-on-obsolete-package
      Suggests: libfreetype6-dev => libfreetype-dev
    - W: poppler source: build-depends-on-obsolete-package
      Build-Depends: libfontconfig1-dev => libfontconfig-dev
    - W: poppler source: build-depends-on-obsolete-package
      Build-Depends: libfreetype6-dev => libfreetype-dev
  * Update standards version to 4.6.2, no changes needed
  * Update minimum version of several Build-Depends and Depends
    per upstream

 -- Amin Bandali <email address hidden> Wed, 16 Aug 2023 18:31:57 -0400

Changed in poppler (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.