Red Hat Security AdvisoryRHSA-2026:0130
poppler security update
Released 2026-01-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) poppler-20.11.0-13.el8_10, poppler-glib-20.11.0-13.el8_10, poppler-qt5-20.11.0-13.el8_10 +1
- Red Hat Enterprise Linux CRB (v. 8) poppler-cpp-20.11.0-13.el8_10, poppler-cpp-devel-20.11.0-13.el8_10, poppler-devel-20.11.0-13.el8_10 +3
Fixes 1 record
Priority LOW 31
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00255 · Published 2025-04-05 · Partial fix · 25.04.0 CWE-125
