ALSA-2026:25058

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/9/ALSA-2026-25058.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json

JSON Data

https://api.test.osv.dev/v1/vulns/ALSA-2026:25058

Related

CVE-2026-10118

Published

2026-06-10T00:00:00Z

Modified

2026-06-11T16:00:05.202140191Z

Summary

Important: poppler security update

Details

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9

poppler

Package

Name: poppler
Purl: pkg:rpm/almalinux/poppler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-cpp

Package

Name: poppler-cpp
Purl: pkg:rpm/almalinux/poppler-cpp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-cpp-devel

Package

Name: poppler-cpp-devel
Purl: pkg:rpm/almalinux/poppler-cpp-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-devel

Package

Name: poppler-devel
Purl: pkg:rpm/almalinux/poppler-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-glib

Package

Name: poppler-glib
Purl: pkg:rpm/almalinux/poppler-glib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-glib-devel

Package

Name: poppler-glib-devel
Purl: pkg:rpm/almalinux/poppler-glib-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-glib-doc

Package

Name: poppler-glib-doc
Purl: pkg:rpm/almalinux/poppler-glib-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-qt5

Package

Name: poppler-qt5
Purl: pkg:rpm/almalinux/poppler-qt5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-qt5-devel

Package

Name: poppler-qt5-devel
Purl: pkg:rpm/almalinux/poppler-qt5-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"

poppler-utils

Package

Name: poppler-utils
Purl: pkg:rpm/almalinux/poppler-utils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.01.0-24.el9_8.1

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:25058.json"