<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 18:18:50 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-43903</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-43903</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; freedesktop Poppler&lt;/p&gt;
&lt;p&gt;NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; freedesktop Poppler&lt;/p&gt;
&lt;p&gt;NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-43903</guid>
    </item>
    <item>
      <title>USN-7471-1 — poppler vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-7471-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler&lt;/p&gt;
&lt;p&gt;It was discovered that poppler did not properly verify adbe.pkcs7.sha1
signatures in PDF documents. An attacker could possibly use this issue
to create documents with forged signatures that are treated as
legitimately signed.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler&lt;/p&gt;
&lt;p&gt;It was discovered that poppler did not properly verify adbe.pkcs7.sha1
signatures in PDF documents. An attacker could possibly use this issue
to create documents with forged signatures that are treated as
legitimately signed.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-7471-1</guid>
    </item>
  </channel>
</rss>
