Red Hat Product Errata RHSA-2026:24984 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:24984 - Security Advisory Overview Updated Packages Synopsis Important: poppler security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for poppler is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2460428 - CVE-2026-10118 poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication CVEs CVE-2026-10118 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM poppler-20.11.0-14.el8_10.src.rpm SHA-256: 0b69ebc3b116885d3e4c0b70c1841c627343e35380d7228424b9dc9281dcaaf9 x86_64 poppler-20.11.0-14.el8_10.i686.rpm SHA-256: c9e8ff0cd3de4ff94828f2de789dfb0c0aa55012cb42ca9ab581437a11ed0b69 poppler-20.11.0-14.el8_10.x86_64.rpm SHA-256: 4bf0ef251814a49c8677994e9f75a08758fecfeb17fd2f38e4f71cf0b0747c6f poppler-cpp-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 36f59b32a97fe8b55a1c760707f9298925d083fa19fa8791aede206a944a8379 poppler-cpp-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: cc83d677dd33ea354213ee82dbdb19f1ed06ba4919a058b0cda455bfbe35df9e poppler-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 23ee864205422e9c636b7b3f289691797ca34c597a33c338387ebf59f6343d83 poppler-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: b3ca52c111ab0ca70b825404f88822239d6bd838d67c052d859485fe2bcceea4 poppler-debugsource-20.11.0-14.el8_10.i686.rpm SHA-256: 2f2a7181377e04397e665690ce5baf507d6d043fa96471e50ef744ed1ea8c854 poppler-debugsource-20.11.0-14.el8_10.x86_64.rpm SHA-256: 89b6dbfaa9ce8370b1f9839720a01cbbcc8ed4f08e3eb6acf1545473f60023f0 poppler-glib-20.11.0-14.el8_10.i686.rpm SHA-256: a1613f7c0efd548a9cfcb5e30e991da7477a30ec56eaa02605eed7333364b8cf poppler-glib-20.11.0-14.el8_10.x86_64.rpm SHA-256: e592c9d443b942ed2d607011514221a57293c34031a46337e644cfcc30062dbd poppler-glib-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: dec1f6020ab5e7c84a6ec8a00989d93e6ef0a89f37c6914aceb914c8e4ade2a6 poppler-glib-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: 531c87b327b3b57f750362b23c2b17460af41c65fd6b4e5f92ca3178b5a3ff6b poppler-qt5-20.11.0-14.el8_10.i686.rpm SHA-256: 1fc8e940efa7ae7f6aeb3f358222598ffbd00cc1593855435a5104609a985e76 poppler-qt5-20.11.0-14.el8_10.x86_64.rpm SHA-256: 551970981d5dc6954663963417e62d920aedff7e1c6120358fc0e17d5ab17dd2 poppler-qt5-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 7c184f83d1049d718c3c50c0b4d6d340c4d3595b4e28946034f4822a9692ff8e poppler-qt5-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: e0b98bcbd2c4ffa1dddb2d324c940f530cf8c3dcaf344a42dc02e56042ad8670 poppler-utils-20.11.0-14.el8_10.x86_64.rpm SHA-256: 4d3c3dac65cd8667460223deb6a0d5d4be8b1b09e98dc79f256dac22b2921204 poppler-utils-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 23d174532de364ee6d04e32ff0dda48299615a986721328dea5888b477f2c10d poppler-utils-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: c2e5f556361926e9cfbfd4c7eef435c697149ca2513c92051d20bdcd5e99e61c Red Hat Enterprise Linux for IBM z Systems 8 SRPM poppler-20.11.0-14.el8_10.src.rpm SHA-256: 0b69ebc3b116885d3e4c0b70c1841c627343e35380d7228424b9dc9281dcaaf9 s390x poppler-20.11.0-14.el8_10.s390x.rpm SHA-256: 73084022ac0a4fb2f15ff2aba5667729eed989d865797aa09d84a5b19b2e8b3b poppler-cpp-debuginfo-20.11.0-14.el8_10.s390x.rpm SHA-256: 9931d0ae09518f0bfd3acc95c41c1ded72c7ccaba5f7025e848854ec1f859483 poppler-debuginfo-20.11.0-14.el8_10.s390x.rpm SHA-256: f2bfb9986a89a62ad6e46723a105c4b0a43cc9f59944f6e063610ccd6aae6039 poppler-debugsource-20.11.0-14.el8_10.s390x.rpm SHA-256: 212d5814569ba1e16aa001ee429b64c02c3b81e274da2bce845412f8c6a8e74e poppler-glib-20.11.0-14.el8_10.s390x.rpm SHA-256: ba49183a64cee27a0f0f1e5362af86a610d6dba0683ec0ffd39efd63ebbf6293 poppler-glib-debuginfo-20.11.0-14.el8_10.s390x.rpm SHA-256: e798e4aaf322eed8f8cea0935c609ca86c9365678eed123fdacba7d586c76fcc poppler-qt5-20.11.0-14.el8_10.s390x.rpm SHA-256: 7b0f3ca148facc902833f8b82958295b046b6e7d4b940f1f1c27cae70a8e34a1 poppler-qt5-debuginfo-20.11.0-14.el8_10.s390x.rpm SHA-256: 53bc401b2db955199329874a1e83213f40cb0d9b46fe9b2c64afacc609860930 poppler-utils-20.11.0-14.el8_10.s390x.rpm SHA-256: b2feac464a70d996e663d2607cbe3ae394248e38d0a9fd10934cac8161d7cd02 poppler-utils-debuginfo-20.11.0-14.el8_10.s390x.rpm SHA-256: bb59d34c5bf3ecf31d857f8305b194366d869f946015b549ee053b19aab1056e Red Hat Enterprise Linux for Power, little endian 8 SRPM poppler-20.11.0-14.el8_10.src.rpm SHA-256: 0b69ebc3b116885d3e4c0b70c1841c627343e35380d7228424b9dc9281dcaaf9 ppc64le poppler-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 9b3d4c72ff106b93b447e1126fa3d6b940ad8a8aa873d4a3a343441f807953b1 poppler-cpp-debuginfo-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 7568f89756202ee6335b8c640e06b2568e321a8ef8adb40786fa284578de974d poppler-debuginfo-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 235a62b82de4cca1980f8a744a361814706932efbe77d31bb93716cbcf56f73a poppler-debugsource-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 33558cc5b4e94f1405dbc2ac42a01d01d3a015906c30ebd8bf77efa061984c74 poppler-glib-20.11.0-14.el8_10.ppc64le.rpm SHA-256: ec80c53b2a5dddff0309c6c300e4c8c364107b37ad44510527e5b529c8207660 poppler-glib-debuginfo-20.11.0-14.el8_10.ppc64le.rpm SHA-256: bebdd326d9e05d1dba3526e81041bbd104afd91b9c3f0eb205d936a1cba13121 poppler-qt5-20.11.0-14.el8_10.ppc64le.rpm SHA-256: a668b2b633ebbb2efbee1026fc469ff776fa1e9cf92c255b71ec65737e0cae58 poppler-qt5-debuginfo-20.11.0-14.el8_10.ppc64le.rpm SHA-256: a8a80ff7612838e34215014bc0c27c3063fb870c540a10c88c8fabe0dd26789b poppler-utils-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 16f17ddc664363c6ca0ed31f550ed691b1708ed1231c085fadd8e0329b1d20e2 poppler-utils-debuginfo-20.11.0-14.el8_10.ppc64le.rpm SHA-256: 0eb3a6a72b3a23fa5b208b7aa5b8a03a35f8ca8ef3cf9db42080d91de32fcf39 Red Hat Enterprise Linux for ARM 64 8 SRPM poppler-20.11.0-14.el8_10.src.rpm SHA-256: 0b69ebc3b116885d3e4c0b70c1841c627343e35380d7228424b9dc9281dcaaf9 aarch64 poppler-20.11.0-14.el8_10.aarch64.rpm SHA-256: 06ccca9e52e5bdbe7c78c9dc7dc1bb1555dfbd885a8ee5c408722e9f7d6b0518 poppler-cpp-debuginfo-20.11.0-14.el8_10.aarch64.rpm SHA-256: 6acbf135d88e1ca4c305249f8bbfecbbbc1e9eb7d0a7f5d14f3cf433c208eda2 poppler-debuginfo-20.11.0-14.el8_10.aarch64.rpm SHA-256: 0c0bd1b1f65a864a0573e16fb71ff0ddfdec642fd26b447f64ee144ee4305938 poppler-debugsource-20.11.0-14.el8_10.aarch64.rpm SHA-256: 52bdb6eeee4e287befc037f86b220148e0c1200d40383fc53ea2381407cacc25 poppler-glib-20.11.0-14.el8_10.aarch64.rpm SHA-256: 37974786dc28b6b9a1c8e746f643a31a76937c17c7505dc1e76476ae1fa08b3e poppler-glib-debuginfo-20.11.0-14.el8_10.aarch64.rpm SHA-256: 23a4c6749ec9954cb100fb27b77b0897db302558c138ae5d7f3276a8aa7764b6 poppler-qt5-20.11.0-14.el8_10.aarch64.rpm SHA-256: 110153b0d6b021d5271a9ab9f959b81967d0d1b7808af38125ece113039e13cb poppler-qt5-debuginfo-20.11.0-14.el8_10.aarch64.rpm SHA-256: cf1e64a2f7d16228d5f81f3f48593e40d22b93e05767d57d8b11a59e2adf91a9 poppler-utils-20.11.0-14.el8_10.aarch64.rpm SHA-256: 520a6927c9d4ad095d8a2a2563a907cbf688eaf35501fcd099a8d61c9f1be1c1 poppler-utils-debuginfo-20.11.0-14.el8_10.aarch64.rpm SHA-256: 31412879b402f818ba5a34b723fc55534c637742383301a8b1b78e53c633c47e Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 poppler-cpp-20.11.0-14.el8_10.i686.rpm SHA-256: f9cc5dbb6c8ffbf130d0db689d2d193d736b9ffb6461fda5dc8eafbdd59d5715 poppler-cpp-20.11.0-14.el8_10.x86_64.rpm SHA-256: e1e62f8858903bbd21b9cd43efc45555d12c4b5454b63e48a93626ec3270c4bd poppler-cpp-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 36f59b32a97fe8b55a1c760707f9298925d083fa19fa8791aede206a944a8379 poppler-cpp-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: cc83d677dd33ea354213ee82dbdb19f1ed06ba4919a058b0cda455bfbe35df9e poppler-cpp-devel-20.11.0-14.el8_10.i686.rpm SHA-256: 0159ddf3387c1a3b9edb466a7e1772d58ca26999f1b8709e115c069fe8872a95 poppler-cpp-devel-20.11.0-14.el8_10.x86_64.rpm SHA-256: 02c8ce0b90cce1e933403bb33626ac18986b87b0f49eeffc89956feb7f2b03ea poppler-debuginfo-20.11.0-14.el8_10.i686.rpm SHA-256: 23ee864205422e9c636b7b3f289691797ca34c597a33c338387ebf59f6343d83 poppler-debuginfo-20.11.0-14.el8_10.x86_64.rpm SHA-256: b3ca52c111ab0ca70b825