Summary
[0.26.5-43.0.1.el7.1]
- Fix for CVE-2026-10118 [Orabug: 39637155]
[0.26.5-43.el7_9.1]
- Handle bytestring representation of named dests
- Resolves: #1857678
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | poppler | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-cpp | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-cpp-devel | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-demos | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-devel | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-glib | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-glib-devel | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-qt | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-qt-devel | 0:0.26.5-43.0.1.el7.1 |
| Oracle Linux · 7 | poppler-utils | 0:0.26.5-43.0.1.el7.1 |
Vulnerabilities 1
-
High 7.8
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap …