Red Hat Security Advisory

RHSA-2026:80579

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images poppler-26.08.0-1.4.hum1@aarch64, poppler-26.08.0-1.4.hum1@s390x, poppler-26.08.0-1.4.hum1@src +28

Fixes 1 record

TI-2026-69737 CVE-2026-107705

Stack buffer overflow in Poppler PDF password handling

LOW 36

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00324 Published 2026-10-08 Partial fix CWE-121