Red Hat Security Advisory

RHSA-2026:1090

poppler security update

Released 2026-01-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) poppler-24.02.0-7.el10_0, poppler-cpp-24.02.0-7.el10_0, poppler-glib-24.02.0-7.el10_0 +2
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) poppler-cpp-devel-24.02.0-7.el10_0, poppler-devel-24.02.0-7.el10_0, poppler-glib-devel-24.02.0-7.el10_0 +2

Fixes 1 record

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125