Skip to content
OpenAdvisories
Medium RHSA-2026:7364 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 poppler 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp-devel 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-devel 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-devel 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-doc 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt5 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt5-devel 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6-devel 0:26.01.0-7.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-utils 0:26.01.0-7.hum1

Vulnerabilities 2

  • Medium 6.1
    CVE-2025-52885

    GHSL-2025-042: Poppler has Use-After-Free

    Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw point…

    Poppler poppler poppler poppler Debian Ubuntu
  • Low 2.9
    CVE-2025-43718

    Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within …

    Freedesktop Poppler poppler poppler Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2025-52885
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2025-43718
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7364.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2400893
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-43718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-43718
  • article
    https://github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2025-43718.md
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/commit/f54b815672117c250420787c8c006de98e8c7408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2403224
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-52885
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-52885
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1884
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1884#note_3114334
  • article
    https://securitylab.github.com/advisories/GHSL-2025-042_poppler/