CLSA-2026-1786352279 poppler: Fix of 2 CVEs

CVE-2025-50420: fix infinite recursion uncontrolled recursion, CWE-674 in pdfseparate via crafted /Annots dictionaries in PDFDoc::markAnnotations, leading to denial of service...