RHSA-2026:71625MediumCVSS 6.3
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-93313 — poppler: Poppler: Remote integer overflow vulnerability
🎯 Affected products22
- Red Hat Hardened Images
- poppler-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-0:26.08.0-1.1.hum1@src as a component of Red Hat Hardened Images
- poppler-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-cpp-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-cpp-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-cpp-devel-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-cpp-devel-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-devel-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-devel-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-glib-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-glib-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-glib-devel-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-glib-devel-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-glib-doc-0:26.08.0-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
- poppler-glib-doc-0:26.08.0-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
- poppler-qt6-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-qt6-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-qt6-devel-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-qt6-devel-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
- poppler-utils-0:26.08.0-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
- poppler-utils-0:26.08.0-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, avoid opening untrusted PDF documents with applications that rely on Poppler for rendering. Additionally, consider running applications that process untrusted content in a sandboxed environment to limit potential impact. No configuration option is available to disable JBIG2 stream processing within Poppler without patching.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:71625
- externalhttps://access.redhat.com/security/cve/CVE-2026-93313
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://images.redhat.com/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71625.json