{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2022-38784, CVE-2021-30860, CVE-2022-38171: fix integer overflow in JBIG2 text region decoder\n- CVE-2025-32365: fix invalid memory read in JBIG2Bitmap::combine", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/advisories/2026/clsa-2026_1793019763.json" } ], "tracking": { "current_release_date": "2026-10-26T13:04:24Z", "generator": { "date": "2026-10-26T13:04:24Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1793019763", "initial_release_date": "2026-10-26T13:04:24Z", "revision_history": [ { "date": "2026-10-26T13:04:24Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "poppler: Fix of 4 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-cpp-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-glib-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-glib@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-demos@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-cpp@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-qt@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-qt-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product": { "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_id": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-utils@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-cpp-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-glib-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-glib@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-demos@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-cpp@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-qt@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-qt-devel@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product": { "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_id": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/poppler-utils@0.26.5-43.0.1.el7.1.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686" }, "product_reference": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" }, "product_reference": "poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-38171", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-38171" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2022/09/02/11", "url": "http://www.openwall.com/lists/oss-security/2022/09/02/11" }, { "category": "external", "summary": "http://www.xpdfreader.com/security-fixes.html", "url": "http://www.xpdfreader.com/security-fixes.html" }, { "category": "external", "summary": "https://dl.xpdfreader.com/xpdf-4.04.tar.gz", "url": "https://dl.xpdfreader.com/xpdf-4.04.tar.gz" }, { "category": "external", "summary": "https://github.com/jeffssh/CVE-2021-30860", "url": "https://github.com/jeffssh/CVE-2021-30860" }, { "category": "external", "summary": "https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md", "url": "https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md" }, { "category": "external", "summary": "https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html", "url": "https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30860", "url": "https://www.cve.org/CVERecord?id=CVE-2021-30860" } ], "release_date": "2022-08-22T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T13:02:45.345643Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763", "product_ids": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-30860", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-30860" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/25", "url": "http://seclists.org/fulldisclosure/2021/Sep/25" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/26", "url": "http://seclists.org/fulldisclosure/2021/Sep/26" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/27", "url": "http://seclists.org/fulldisclosure/2021/Sep/27" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/28", "url": "http://seclists.org/fulldisclosure/2021/Sep/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/38", "url": "http://seclists.org/fulldisclosure/2021/Sep/38" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/39", "url": "http://seclists.org/fulldisclosure/2021/Sep/39" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/40", "url": "http://seclists.org/fulldisclosure/2021/Sep/40" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Sep/50", "url": "http://seclists.org/fulldisclosure/2021/Sep/50" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2022/09/02/11", "url": "http://www.openwall.com/lists/oss-security/2022/09/02/11" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202209-21", "url": "https://security.gentoo.org/glsa/202209-21" }, { "category": "external", "summary": "https://support.apple.com/en-us/HT212804", "url": "https://support.apple.com/en-us/HT212804" }, { "category": "external", "summary": "https://support.apple.com/en-us/HT212805", "url": "https://support.apple.com/en-us/HT212805" }, { "category": "external", "summary": "https://support.apple.com/en-us/HT212806", "url": "https://support.apple.com/en-us/HT212806" }, { "category": "external", "summary": "https://support.apple.com/en-us/HT212807", "url": "https://support.apple.com/en-us/HT212807" }, { "category": "external", "summary": "https://support.apple.com/kb/HT212824", "url": "https://support.apple.com/kb/HT212824" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30860", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30860" } ], "release_date": "2021-08-24T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T13:02:45.345643Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763", "product_ids": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-32365", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-32365" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/issues/1577", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/issues/1577" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1792", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1792" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html", "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html" } ], "release_date": "2025-04-05T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T13:02:45.345643Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763", "product_ids": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-38784", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-38784" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2022/09/02/11", "url": "http://www.openwall.com/lists/oss-security/2022/09/02/11" }, { "category": "external", "summary": "https://github.com/jeffssh/CVE-2021-30860", "url": "https://github.com/jeffssh/CVE-2021-30860" }, { "category": "external", "summary": "https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md", "url": "https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1261/diffs?commit_id=27354e9d9696ee2bc063910a6c9a6b27c5184a52", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1261/diffs?commit_id=27354e9d9696ee2bc063910a6c9a6b27c5184a52" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/" }, { "category": "external", "summary": "https://poppler.freedesktop.org/releases.html", "url": "https://poppler.freedesktop.org/releases.html" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202209-21", "url": "https://security.gentoo.org/glsa/202209-21" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-38171", "url": "https://www.cve.org/CVERecord?id=CVE-2022-38171" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5224", "url": "https://www.debian.org/security/2022/dsa-5224" } ], "release_date": "2022-08-30T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T13:02:45.345643Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763", "product_ids": [ "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-cpp-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-demos-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-glib-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-qt-devel-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.i686", "Oracle-Linux-7:poppler-utils-0:0.26.5-43.0.1.el7.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793019763" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }