Skip to content
OpenAdvisories
Medium RHSA-2026:58482 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Sep 24, 2026 · Updated Sep 24, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 poppler 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp-devel 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-devel 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-devel 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-doc 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6-devel 0:26.08.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-utils 0:26.08.0-1.hum1

Vulnerabilities 2

  • Medium 6.3
    CVE-2026-93314

    Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

    A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remo…

    Freedesktop Poppler poppler poppler Debian Ubuntu
  • Medium 4.3
    CVE-2026-93312

    Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

    A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been publ…

    Freedesktop Poppler poppler poppler Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-93314
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-93312
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58482.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2537889
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-93312
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-93312
  • article
    https://github.com/r1ck9-2q/cve_summit/blob/main/Null-pointer-offset-undefined-behavior-in-JBIG2Stream-rewind-JBIG2Stream.cc-1229.md
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759
  • article
    https://vuldb.com/cve/CVE-2026-93312
  • article
    https://vuldb.com/submit/942345
  • article
    https://vuldb.com/vuln/406610
  • article
    https://vuldb.com/vuln/406610/cti
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538151
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-93314
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-93314
  • article
    https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-mapCodeToGID-FoFiTrueType.cc-608.md
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a?merge_request_iid=2315
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761
  • article
    https://vuldb.com/cve/CVE-2026-93314
  • article
    https://vuldb.com/submit/942347
  • article
    https://vuldb.com/vuln/406613
  • article
    https://vuldb.com/vuln/406613/cti