Red Hat Security Advisory

RHSA-2026:1091

poppler security update

Released 2026-01-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) poppler-0.66.0-26.el8_2.1, poppler-glib-0.66.0-26.el8_2.1, poppler-utils-0.66.0-26.el8_2.1

Fixes 1 record

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125