Medium ELSA-2026-0126 1 CVE

Moderate: poppler security update (Oracle Linux 9)

Published Jan 6, 2026 · Updated Jan 6, 2026

Ecosystem: Oracle Linux

Summary

[21.01.0-23]
- Bump release for build inheritance
- Resolves: RHEL-131792

[21.01.0-22]
- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792

Fixed packages 10

Release	Package	Fixed in
Oracle Linux · 9	poppler	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-cpp	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-cpp-devel	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-devel	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-glib	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-glib-devel	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-glib-doc	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-qt5	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-qt5-devel	0:21.01.0-23.el9_7
Oracle Linux · 9	poppler-utils	0:21.01.0-23.el9_7

Vulnerabilities 1

Medium 4.0

CVE-2025-32365

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function i…

Freedesktop Poppler poppler poppler Debian Ubuntu

Apr 5, 2025