The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler-qt5-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8-32bitUpgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler135-32bitUpgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt6-develUpgrade libpoppler135Upgrade libpoppler-qt6-3Upgrade poppler-toolsUpgrade libpoppler-qt5-1 | Dec 5, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade libpoppler97Upgrade libpoppler147Upgrade libpoppler140Upgrade libpoppler73 (Ubuntu Pro)Upgrade poppler-utilsUpgrade libpoppler118Upgrade libpoppler134Upgrade poppler-utils (Ubuntu Pro) | May 1, 2025 | Apr 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub