Red Hat Security Advisory

RHSA-2026:0126

poppler security update

Released 2026-01-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) poppler-21.01.0-23.el9_7, poppler-cpp-21.01.0-23.el9_7, poppler-glib-21.01.0-23.el9_7 +2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) poppler-cpp-devel-21.01.0-23.el9_7, poppler-devel-21.01.0-23.el9_7, poppler-glib-devel-21.01.0-23.el9_7 +2

Fixes 1 record

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125