Version in base suite: 25.04.2-1 Base version: skanpage_25.04.2-1 Target version: skanpage_25.04.2-1+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/s/skanpage/skanpage_25.04.2-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/s/skanpage/skanpage_25.04.2-1+deb13u1.dsc changelog | 6 ++++++ patches/CVE-2025-55174.patch | 16 ++++++++++++++++ patches/series | 1 + 3 files changed, 23 insertions(+) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmpe9b7bkcr/skanpage_25.04.2-1.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmpe9b7bkcr/skanpage_25.04.2-1+deb13u1.dsc: no acceptable signature found diff -Nru skanpage-25.04.2/debian/changelog skanpage-25.04.2/debian/changelog --- skanpage-25.04.2/debian/changelog 2025-06-09 21:25:06.000000000 +0000 +++ skanpage-25.04.2/debian/changelog 2026-06-08 21:01:32.000000000 +0000 @@ -1,3 +1,9 @@ +skanpage (25.04.2-1+deb13u1) trixie; urgency=medium + + * CVE-2025-55174 (Closes: #1121443) + + -- Moritz Mühlenhoff Mon, 08 Jun 2026 23:01:32 +0200 + skanpage (25.04.2-1) unstable; urgency=medium [ Aurélien COUDERC ] diff -Nru skanpage-25.04.2/debian/patches/CVE-2025-55174.patch skanpage-25.04.2/debian/patches/CVE-2025-55174.patch --- skanpage-25.04.2/debian/patches/CVE-2025-55174.patch 1970-01-01 00:00:00.000000000 +0000 +++ skanpage-25.04.2/debian/patches/CVE-2025-55174.patch 2026-06-08 21:01:28.000000000 +0000 @@ -0,0 +1,16 @@ +From 19308900da27b46739f2360426b91479e7179a2f Mon Sep 17 00:00:00 2001 +From: Jeff Robertson +Date: Sat, 19 Jul 2025 11:35:29 -0400 +Subject: [PATCH] Truncate existing files when overwriting + +--- skanpage-25.04.2.orig/src/DocumentSaver.cpp ++++ skanpage-25.04.2/src/DocumentSaver.cpp +@@ -79,7 +79,7 @@ void DocumentSaver::savePDF(const QUrl & + { + const QString localName = getLocalNameForFile(fileUrl); + QFile file(localName); +- bool ok = file.open(QIODevice::ReadWrite); ++ bool ok = file.open(QIODevice::WriteOnly); + if (!ok) { + Q_EMIT showUserMessage(SkanpageUtils::ErrorMessage, i18nc("%1 is the error message", "An error ocurred while saving: %1.", file.errorString())); + return; diff -Nru skanpage-25.04.2/debian/patches/series skanpage-25.04.2/debian/patches/series --- skanpage-25.04.2/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ skanpage-25.04.2/debian/patches/series 2026-06-08 21:01:11.000000000 +0000 @@ -0,0 +1 @@ +CVE-2025-55174.patch