Skip to content
OpenAdvisories
Medium RHSA-2026:80172 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 10, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 poppler 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-cpp-devel 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-devel 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-devel 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-glib-doc 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-qt6-devel 0:26.08.0-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 poppler-utils 0:26.08.0-1.3.hum1

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-107705

    Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

    Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 by…

    Freedesktop Poppler poppler poppler Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-107705
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80172.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548222
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107705
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107705
  • article
    https://gitlab.freedesktop.org/poppler/poppler
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/blob/poppler-26.10.0/poppler/Decrypt.cc#L1767
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2398
  • article
    https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1814
  • article
    https://www.vulncheck.com/advisories/poppler-0.42.0-through-26.10.0-stack-buffer-overflow-via-decrypt-revision6hash