Red Hat Security Advisory

RHSA-2026:0773

poppler security update

Released 2026-01-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) poppler-20.11.0-5.el8_6, poppler-glib-20.11.0-5.el8_6, poppler-utils-20.11.0-5.el8_6
Red Hat Enterprise Linux AppStream E4S (v.8.6) poppler-20.11.0-5.el8_6, poppler-glib-20.11.0-5.el8_6, poppler-utils-20.11.0-5.el8_6
Red Hat Enterprise Linux AppStream TUS (v.8.6) poppler-20.11.0-5.el8_6, poppler-glib-20.11.0-5.el8_6, poppler-utils-20.11.0-5.el8_6

Fixes 1 record

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125