p PatchFirst

CVE-2025-43903

CVE-2025-43903

This page contains facts from public vulnerability sources. Check the original advisory before updating.

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

CVSS 4.3 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • poppler

    Versions
    • ≥ 0, < 25.04.0: Affected (custom)

    Update to 25.04.0

  • poppler Debian:12

    Versions
    • 22.12.0-2
    • 22.12.0-2+deb12u1
    • 22.12.0-2+deb12u2
    Affected ranges
    • ECOSYSTEM: < 22.12.0-2+deb12u3

    Update to 22.12.0-2+deb12u3

  • poppler Debian:13

    Affected ranges
    • ECOSYSTEM: < 25.03.0-4

    Update to 25.03.0-4

  • poppler Debian:14

    Affected ranges
    • ECOSYSTEM: < 25.03.0-4

    Update to 25.03.0-4

  • poppler Ubuntu:Pro:18.04:LTS

    Versions
    • 0.57.0-2ubuntu4
    • 0.57.0-2ubuntu5
    • 0.62.0-1ubuntu1
    • 0.62.0-2ubuntu1
    • 0.62.0-2ubuntu2
    • 0.62.0-2ubuntu2.1
    • 0.62.0-2ubuntu2.2
    • 0.62.0-2ubuntu2.4
    • 0.62.0-2ubuntu2.5
    • 0.62.0-2ubuntu2.6
    • 0.62.0-2ubuntu2.7
    • 0.62.0-2ubuntu2.8
    • 0.62.0-2ubuntu2.9
    • 0.62.0-2ubuntu2.10
    • 0.62.0-2ubuntu2.11
    • 0.62.0-2ubuntu2.12
    • 0.62.0-2ubuntu2.13
    • 0.62.0-2ubuntu2.14
    • 0.62.0-2ubuntu2.14+esm1
    • 0.62.0-2ubuntu2.14+esm2
    • 0.62.0-2ubuntu2.14+esm3
    • 0.62.0-2ubuntu2.14+esm4
    • 0.62.0-2ubuntu2.14+esm5
    Affected ranges
    • ECOSYSTEM: < 0.62.0-2ubuntu2.14+esm6

    Update to 0.62.0-2ubuntu2.14+esm6

  • poppler Ubuntu:20.04:LTS

    Versions
    • 0.80.0-0ubuntu1
    • 0.80.0-0ubuntu3
    • 0.80.0-0ubuntu4
    • 0.80.0-0ubuntu5
    • 0.85.0-1ubuntu1
    • 0.85.0-1ubuntu3
    • 0.86.1-0ubuntu1
    • 0.86.1-0ubuntu1.1
    • 0.86.1-0ubuntu1.2
    • 0.86.1-0ubuntu1.3
    • 0.86.1-0ubuntu1.4
    • 0.86.1-0ubuntu1.5
    • 0.86.1-0ubuntu1.6
    Affected ranges
    • ECOSYSTEM: < 0.86.1-0ubuntu1.7

    Update to 0.86.1-0ubuntu1.7

  • poppler Ubuntu:22.04:LTS

    Versions
    • 21.06.1-1
    • 21.11.0-1~ubuntu2
    • 22.02.0-2
    • 22.02.0-2ubuntu0.1
    • 22.02.0-2ubuntu0.2
    • 22.02.0-2ubuntu0.3
    • 22.02.0-2ubuntu0.4
    • 22.02.0-2ubuntu0.5
    • 22.02.0-2ubuntu0.6
    • 22.02.0-2ubuntu0.7
    Affected ranges
    • ECOSYSTEM: < 22.02.0-2ubuntu0.8

    Update to 22.02.0-2ubuntu0.8

  • poppler Ubuntu:24.04:LTS

    Versions
    • 23.08.0-2ubuntu1
    • 23.12.0-1ubuntu2
    • 24.02.0-1ubuntu2
    • 24.02.0-1ubuntu8
    • 24.02.0-1ubuntu9
    • 24.02.0-1ubuntu9.1
    • 24.02.0-1ubuntu9.2
    • 24.02.0-1ubuntu9.3
    Affected ranges
    • ECOSYSTEM: < 24.02.0-1ubuntu9.4

    Update to 24.02.0-1ubuntu9.4

Original sources

Check your server →