Red Hat Product Errata RHSA-2026:29952 - Security Advisory Issued: 2026-06-25 Updated: 2026-06-25 RHSA-2026:29952 - Security Advisory Overview Updated Packages Synopsis Important: compat-poppler022 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-poppler022 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Compatibility package with poppler 0.22 libraries. Security Fix(es): poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2460428 - CVE-2026-10118 poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication CVEs CVE-2026-10118 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM compat-poppler022-0.22.5-7.el7_9.src.rpm SHA-256: 5b61489308deb037ec46d7faa77a7e4fc9d319dce44de0789c1e4fea52d308a0 x86_64 compat-poppler022-0.22.5-7.el7_9.i686.rpm SHA-256: fce2c244193fc84a0bed349a9f6fe9347902ee862fa30d5589a67177f4dcc21e compat-poppler022-0.22.5-7.el7_9.x86_64.rpm SHA-256: ab71ee592b1f7e5d98b7cd3f2382c1b3e480a70533be103097b70b23227ad552 compat-poppler022-cpp-0.22.5-7.el7_9.i686.rpm SHA-256: cdc0dcb41c0cbb1bf4591188bceed12337fb15630420586d783f340053dc5173 compat-poppler022-cpp-0.22.5-7.el7_9.x86_64.rpm SHA-256: 7099fa1ebc4b14983b185d8e92ba299812d38e5d01fb0b3075ea917d99796163 compat-poppler022-debuginfo-0.22.5-7.el7_9.i686.rpm SHA-256: 6da047e017d8b75c7ac3df3e5493d5bf384a18dcbb245612c543bfa9d224911e compat-poppler022-debuginfo-0.22.5-7.el7_9.i686.rpm SHA-256: 6da047e017d8b75c7ac3df3e5493d5bf384a18dcbb245612c543bfa9d224911e compat-poppler022-debuginfo-0.22.5-7.el7_9.x86_64.rpm SHA-256: 08dbe9825321c1795589f332d875d8992a56732975d4a943696918d1fb9c23bb compat-poppler022-debuginfo-0.22.5-7.el7_9.x86_64.rpm SHA-256: 08dbe9825321c1795589f332d875d8992a56732975d4a943696918d1fb9c23bb compat-poppler022-glib-0.22.5-7.el7_9.i686.rpm SHA-256: dca1a651425e6b6a34a98f8e5a1a589a26d074fb8be1707f0228fac3b01e8860 compat-poppler022-glib-0.22.5-7.el7_9.x86_64.rpm SHA-256: ea4568892a837860230060c52e7eafef678cfe06f3d65ba669906c35478d485d compat-poppler022-qt-0.22.5-7.el7_9.i686.rpm SHA-256: 2e8ceb2449c8cbec14d5b69e5762bf5b5a9f2ca3c7e598ec05c9653523163fb4 compat-poppler022-qt-0.22.5-7.el7_9.x86_64.rpm SHA-256: 70cb4dbec3db3e0a842e2f12f8a063f59622b589254408494b48521315a7747d Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM compat-poppler022-0.22.5-7.el7_9.src.rpm SHA-256: 5b61489308deb037ec46d7faa77a7e4fc9d319dce44de0789c1e4fea52d308a0 s390x compat-poppler022-0.22.5-7.el7_9.s390.rpm SHA-256: 1f8d2ae6f8198df8340a49507e6ed0278790fe8811e99f0add748db6a5d19c53 compat-poppler022-0.22.5-7.el7_9.s390x.rpm SHA-256: a9d01af01e09fa0b998e686e689663650a26e8b6c6b3d6c5d797b3b6e87a9a43 compat-poppler022-cpp-0.22.5-7.el7_9.s390.rpm SHA-256: 1d793cedb73ea65a439e9f86d5cf22e791633769099d664702c8e2252461eeb3 compat-poppler022-cpp-0.22.5-7.el7_9.s390x.rpm SHA-256: 07828710cf22e592fdaf9c1f739c495678bed33144935aaf05f075eefbe269cf compat-poppler022-debuginfo-0.22.5-7.el7_9.s390.rpm SHA-256: 2b3e22967a584cf7577a60f5efbe14efed9d4cba7d24c18339901e6b6d5c99be compat-poppler022-debuginfo-0.22.5-7.el7_9.s390.rpm SHA-256: 2b3e22967a584cf7577a60f5efbe14efed9d4cba7d24c18339901e6b6d5c99be compat-poppler022-debuginfo-0.22.5-7.el7_9.s390x.rpm SHA-256: 98f3df425d53a12196a356691c0bb69b523e17147ef64eacc0866643a245cdb0 compat-poppler022-debuginfo-0.22.5-7.el7_9.s390x.rpm SHA-256: 98f3df425d53a12196a356691c0bb69b523e17147ef64eacc0866643a245cdb0 compat-poppler022-glib-0.22.5-7.el7_9.s390.rpm SHA-256: e3f1c0118877897e11b96ed53dd18e59fbfc6cf5e601742522043f6a6f40c422 compat-poppler022-glib-0.22.5-7.el7_9.s390x.rpm SHA-256: acb8e3b8af9f41d0814a83ad1fe6ed527e7947be73037ffd4e59331f2df07d3e compat-poppler022-qt-0.22.5-7.el7_9.s390.rpm SHA-256: a539bf16a44aa22a141ac18184a86e97e0e5e5eab6bc59a17d60b7fabe53a96d compat-poppler022-qt-0.22.5-7.el7_9.s390x.rpm SHA-256: c3ccb74387658c0245cf75adc96658dfd457f72db1c1a6ed58fc7050c21cc5b9 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM compat-poppler022-0.22.5-7.el7_9.src.rpm SHA-256: 5b61489308deb037ec46d7faa77a7e4fc9d319dce44de0789c1e4fea52d308a0 ppc64 compat-poppler022-0.22.5-7.el7_9.ppc.rpm SHA-256: 7c3c6e001e1b0c9fbba86482d41c6720b0be2a6669c2e851adad3f14765e37c8 compat-poppler022-0.22.5-7.el7_9.ppc64.rpm SHA-256: 04d264e7dd87c077f9e8aa9ce05033cfdbebac3acff2178f4cc76cbaaebc358e compat-poppler022-cpp-0.22.5-7.el7_9.ppc.rpm SHA-256: a3e1bba54ee94b21abcf643200885ce4bf0461555b84902169694a08b815bc94 compat-poppler022-cpp-0.22.5-7.el7_9.ppc64.rpm SHA-256: e249d86c3bb7b742708843313d97377ef71d8e89c60c92ad3f5d6f675e55aa82 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc.rpm SHA-256: 59030ed730c1672fd1622684bae15357f937e895fcef640be42ac879d0e15356 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc.rpm SHA-256: 59030ed730c1672fd1622684bae15357f937e895fcef640be42ac879d0e15356 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc64.rpm SHA-256: 281a891fdc9815c3aa3c0375e63f05c51c33aae22dfe56549f16ff19586b65b8 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc64.rpm SHA-256: 281a891fdc9815c3aa3c0375e63f05c51c33aae22dfe56549f16ff19586b65b8 compat-poppler022-glib-0.22.5-7.el7_9.ppc.rpm SHA-256: 899dbbb6ffd8bdd00876df0fe9af598814b3246925ee4e28c4eb499948b9de45 compat-poppler022-glib-0.22.5-7.el7_9.ppc64.rpm SHA-256: 300d060e65dd7219221095ec038369ffa3d0366e22b2bc6d0f37287537d0877b compat-poppler022-qt-0.22.5-7.el7_9.ppc.rpm SHA-256: 2bdcd1133c202c50e2f950c41c3d5f66b02ca8e4f04134d3ec9d9875fe46535e compat-poppler022-qt-0.22.5-7.el7_9.ppc64.rpm SHA-256: a71cad0d09a587a31053f5b69ac3064e1a21978d15ef646afec64ba9232c680e Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM compat-poppler022-0.22.5-7.el7_9.src.rpm SHA-256: 5b61489308deb037ec46d7faa77a7e4fc9d319dce44de0789c1e4fea52d308a0 ppc64le compat-poppler022-0.22.5-7.el7_9.ppc64le.rpm SHA-256: 26faaa6fe1d9df975f4d060d804b03380a2e9b0680403c0e14dd53d673d143b7 compat-poppler022-cpp-0.22.5-7.el7_9.ppc64le.rpm SHA-256: 568117195c62bc3a1ee7df58ceddc5305051b0308a2cff95157f23bf85684953 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc64le.rpm SHA-256: 8e38df0cae33150e3d5a82f5353669567b8f31f01f5fa14e78dc448b1935de97 compat-poppler022-debuginfo-0.22.5-7.el7_9.ppc64le.rpm SHA-256: 8e38df0cae33150e3d5a82f5353669567b8f31f01f5fa14e78dc448b1935de97 compat-poppler022-glib-0.22.5-7.el7_9.ppc64le.rpm SHA-256: f1ac05b0cbb4fb7df40b1066603da23f7d426b29770e83bf826cd070ad95597b compat-poppler022-qt-0.22.5-7.el7_9.ppc64le.rpm SHA-256: 89b1b3e6edf416c7d363c45ab4306fc9e401015f9ba12f76e17048499910a26d The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .
An integer overflow in the Poppler PDF library's `SplashOutputDev::tilingPatternFill` function (CVE-2026-10118) leads to a heap buffer overflow via unchecked dimension multiplication, with a CVSS 3.1 score of 7.8 (High). This update addresses the vulnerability in the `compat-poppler022` package for Red Hat Enterprise Linux 7 Extended Lifecycle Support.