Red Hat Product Errata RHSA-2026:27720 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27720 - Security Advisory Overview Updated Packages Synopsis Important: poppler security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for poppler is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2460428 - CVE-2026-10118 poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication CVEs CVE-2026-10118 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM poppler-24.02.0-7.el10_0.1.src.rpm SHA-256: ab7f299e99c249049cf3a608755b19f3c713d78b4398df416427e9900f313027 x86_64 poppler-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 7c0df55eecd2343ee3116e8dfe1ad4687f73b4f98e0d9211a5a7e4fafb350bb9 poppler-cpp-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 8f86586fd95de33a874dd70f1340ec47ddfa7abba598d6b2d53767e26f240d47 poppler-cpp-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: d55274eb7759041d5b883b7410aab0506e79424ba6cdd01943c30812233896c3 poppler-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 53ab25a44c54d1d98902de7c61d1cfbab899f8ad7cc1b6cc015287e9629650f5 poppler-debugsource-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: e9fdc3954de1cae59678e99bc418bb3993e3bbbbcf17bf6ad84ba09c5887423c poppler-glib-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 1aa9684e09d8aac4bac8432b8c0081da15aa1f77aa442cd8ad746cb085dd5703 poppler-glib-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 14ba84eb8c13c428ce409e8f521a9710818555106fcb309a43ff3f6da6b94dd2 poppler-qt6-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: cff1e0989614ee3e58c947e6319d9197f82fbba8c08b8e2943c983cdf940cc9e poppler-qt6-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: db4eef758a89ce5bb380ff70d68bb4cf3651e3490c037995ca623408168a1f5e poppler-utils-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 0bbedfa56a131ab4ae515f530adf2a5e2d40997bff42ad06b60d8f0436642c9b poppler-utils-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 651e941fbd8fda85f002ebac47aa720bc84a265d37d0f5feb3606fd5f1e31e58 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM poppler-24.02.0-7.el10_0.1.src.rpm SHA-256: ab7f299e99c249049cf3a608755b19f3c713d78b4398df416427e9900f313027 s390x poppler-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 42a06bbdc6ecbe5b100e96538e448d67a7a6c30a8d46c4ec8e16f9facb9c1abd poppler-cpp-24.02.0-7.el10_0.1.s390x.rpm SHA-256: f66c5b32eca3479700fa7ac1c04cd1c4f7eb211e7ce47cb9938bc461e979b28c poppler-cpp-debuginfo-24.02.0-7.el10_0.1.s390x.rpm SHA-256: a96e45ff3d06db0c009dc34916a54ec7bb01227f554f3e4982b2b21946f65ad8 poppler-debuginfo-24.02.0-7.el10_0.1.s390x.rpm SHA-256: bf266fa9d2802e28730a4f3dc085e7b520202571be6b93ad9aad7af9fd0fc8cc poppler-debugsource-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 93acea21ebe45a3bc22ae5b3e4122152b8fc07a2d8c0b1a14dd0025c4e1a4213 poppler-glib-24.02.0-7.el10_0.1.s390x.rpm SHA-256: c6b9f4883109deb676d84a86d2ea8f0ad41c200752e7376ef136aaf6e4abbdd7 poppler-glib-debuginfo-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 81654ee367abeeadf09bf7d5dd0834425495545b976707f9f60a6811b9303e88 poppler-qt6-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 11da388e2fdf27ff95d4eab0a1350e775b3d067f1bed5661ca76411354613b2d poppler-qt6-debuginfo-24.02.0-7.el10_0.1.s390x.rpm SHA-256: bf2fea99dc4426daa27113545a3a39d99d871be63d19440f43defb833f5ab19b poppler-utils-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 2d108ba6f4198a582f96e5115d0ee9ce21962bcee72d5c4a72e66bb840b222a3 poppler-utils-debuginfo-24.02.0-7.el10_0.1.s390x.rpm SHA-256: 86eaf3d1c11cd98f07e6f59b082c7aaa620ed6946f3e2720cdce08602dbfca05 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM poppler-24.02.0-7.el10_0.1.src.rpm SHA-256: ab7f299e99c249049cf3a608755b19f3c713d78b4398df416427e9900f313027 ppc64le poppler-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: c82e27c858ff5c5f31a6eab40d183e00e826c0f1b349d8266bc51dfb2e94d50c poppler-cpp-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: 2c941cb78defb1dab5fd55d60cf8320c6833020cecb1e85e8d097c1871cc2fdf poppler-cpp-debuginfo-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: 236eba9eb0408776305028e86cebe7217a6243360f9e2e498ba8b02589eeafae poppler-debuginfo-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: 17049da37c18f9c7f47e7712457a016fd6929792dd9d6d706f932a7f919b2b46 poppler-debugsource-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: d37c4ac9853fef016b3f5f93354aa2a873e365b2ba8c870df6633541e4243dc2 poppler-glib-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: 4f55687082d6681f8543941bdbf00144175a03bc158eaf919a4daabc168f3ed7 poppler-glib-debuginfo-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: 4a58ca08a89ce072eacb4502658e7cce1ab9be6c5f8512ba3d2ad5d4e6808975 poppler-qt6-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: b51287243d1eef36f6a768c717b6ffe1522e52bede6fe8a12afdc2117063fa3f poppler-qt6-debuginfo-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: c2a5baab04a831ec83094804164dba40ff757025a5c12945b987d2d67aba102e poppler-utils-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: e8b9ca403bb57fe5fab11ddbf554f61f01a94d7e9474d1d4142f2e1bee4cba75 poppler-utils-debuginfo-24.02.0-7.el10_0.1.ppc64le.rpm SHA-256: f0f19e9bb75ffb0109ece51944c0fd6d3567eaa2165d0ff4395cc50f4573fadc Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM poppler-24.02.0-7.el10_0.1.src.rpm SHA-256: ab7f299e99c249049cf3a608755b19f3c713d78b4398df416427e9900f313027 aarch64 poppler-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: d4b38ce6862531a58ebc7e3911168f781fa76515f73b880a7e3a8ea09b677ace poppler-cpp-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 384da876a9ce1a8b6bd0e5f95200dc49adca2c940cdb5c49f978afb0e280814d poppler-cpp-debuginfo-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 93ff3fa79a7e5ae8963df26e668518a3fb3b1c98b2e33de0eb2fdf7bacbf1b55 poppler-debuginfo-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 2d87b65a27dedd360a577e413f93cce9df8c8076e5b6c011eb1d66e99360e35b poppler-debugsource-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 77ec9f288e48c5eede251b1257dcdbeb6fce10378113105e23dad3186c0f01c5 poppler-glib-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 9f4defb001085146054f8aa918fcc0d2794705a4f6db5e820bf5fdc55dfc3ddb poppler-glib-debuginfo-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 1ffc939b49fb4ec2a28ad6f1f1b0654922f7f3cd55713ffd5545fba5edbc9067 poppler-qt6-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 41b464d48dcb7bffbf40e737e3c6e58cdec19b81e33d7c4a5eab7d9bc8eb08c5 poppler-qt6-debuginfo-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 0ea629ae3d51d7b786229516a5a36b6352562f08c582054fa0814bee5f293d73 poppler-utils-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 469fcd727b8a940192335eff206c0398e35c256b095222beb074967bb377ad42 poppler-utils-debuginfo-24.02.0-7.el10_0.1.aarch64.rpm SHA-256: 691b4c33fc0bea96b87eb9e4b6c3af8156917b9bb562d39b9c068ad639e2c4bb Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 poppler-cpp-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: d55274eb7759041d5b883b7410aab0506e79424ba6cdd01943c30812233896c3 poppler-cpp-devel-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 64c5ff72075c418dc4e9b3c4eb9f543744548a0d3a49b1409d5f8aa0e20b5dec poppler-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 53ab25a44c54d1d98902de7c61d1cfbab899f8ad7cc1b6cc015287e9629650f5 poppler-debugsource-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: e9fdc3954de1cae59678e99bc418bb3993e3bbbbcf17bf6ad84ba09c5887423c poppler-devel-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: d3e7cb83634d31323254cd696b8bc69bc10a31ade48c01fcdd2f18ecfb389ad1 poppler-glib-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 14ba84eb8c13c428ce409e8f521a9710818555106fcb309a43ff3f6da6b94dd2 poppler-glib-devel-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: 603ad5515339283980829d88fb1ddeaafcc2bb54b8a2aecb43c4da1bf1e4f44c poppler-glib-doc-24.02.0-7.el10_0.1.noarch.rpm SHA-256: e6993d194a92f2933a6526400cbe7bb11e35370ca409f378205be7e4e855ed86 poppler-qt6-debuginfo-24.02.0-7.el10_0.1.x86_64.rpm SHA-256: db4eef758a89ce5bb380ff70d68bb4