[CLSA-2026:1791810115] poppler: Fix of CVE-2026-107705
Type:
security
Severity:
Moderate
Release date:
2026-10-12 13:02:05 UTC
Description:
- CVE-2026-107705: clamp the password to 127 bytes before passing it to revision6Hash in Decrypt::makeFileKey to prevent a stack buffer overflow
CVEs fixed:
Updated packages:
  • poppler-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:a3dde37abe05285b92e6334ccece2c871712da29826037366580683a05a265c1
  • poppler-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:7c1b37ec65baa23c64d1b02a121ef75d2e6ca8a23febb1e65c1f86502b8c638a
  • poppler-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:e11a875d7ac9be2dcf9d4ea06bb1eec0103439443a5ddccad7766a44c55c9b5c
  • poppler-cpp-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:3991474bed4884ed9c9be61deaee586a4a719c3654ce448024ad2f37bef578a7
  • poppler-cpp-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:3f08d298e82eb1e6d066bc98f45982085023454ac04798c2090184cc80d32c3a
  • poppler-cpp-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:91adc887c8e99bd8a309e227865c96bf03ec5d40b755009e7e19845f95e03d35
  • poppler-cpp-devel-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:7edec29df4ff97ef0b23d24619376f67d0d573abe2ba94bb89b264cbc95c908a
  • poppler-cpp-devel-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:3bc04d94566dad28f83317776084bc52efdc012a20cc4602c94cc27045882498
  • poppler-cpp-devel-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:1ca330b2bd26adaf50d310ad6b89f54cb66c2cee6b9deab816b3b134601937f8
  • poppler-devel-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:68b3273163c9f9ef3e1ef276742c1d8eb27beee8aa6cb728f1cb7368ae90368c
  • poppler-devel-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:d54f17da871a40a1c6579ffed3a875af1a8fa2655973a3354073ad36b3898737
  • poppler-devel-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:b9738b75aec65bf7c479b5e607f78f3c68c9fa60e337f4ce3175db43334175ec
  • poppler-glib-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:3e3b06b06b2c435f537b2470535791c415e20997a9a14d2c9d9952ae1d26e2d8
  • poppler-glib-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:737022879abda9faa082a8894885c6e951dbcf06392b5652639c5dfa25f70325
  • poppler-glib-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:24dc66557c87ca6e74c84bed8fd848e21f723b3f71b36a52f90acd2ea5d6b9c6
  • poppler-glib-devel-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:c7a9b8efa9907620fde34cee2305e202125e8beeeb7ad2ee4b13af2d7bb355e5
  • poppler-glib-devel-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:6bdac1b70511fb755af0254e771940653355cb38b1d64cd5728da3e562abea2d
  • poppler-glib-devel-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:b0d3a7ce94e263a5857f38e5b5971d9f71dd9718eefb33734407fd60367e9081
  • poppler-glib-doc-21.01.0-21.el9.tuxcare.els9.noarch.rpm
    sha:e772b1a014d672eee4fb9f4c0f979858edf50bb93dd8081b3c9aa3ff88242c9f
  • poppler-qt5-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:73ce8abe12594b266a29c2587f5a1cec2a5bb47ec1e71de836f5e401e3ec4da9
  • poppler-qt5-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:9a8706e6e1c40b20f96694227a61114c7098efb818d34fdc08c2550ac6772c20
  • poppler-qt5-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:ac9b9f450b8e503b7d9383db198ce626eef18aef622d3cc4572148268186d799
  • poppler-qt5-devel-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:509b55cc75599f5b6338f976ac965b237e7874831c144a1b842f119369e70b59
  • poppler-qt5-devel-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:d44c919eeb7157f90869116ebe2ff6b8d93bf44eff66b987ee4187266463358c
  • poppler-qt5-devel-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:63faaf2af4402c3bd3cc67d12dc04b5aa648b0a0f3b9a4da507113c6beb70193
  • poppler-utils-21.01.0-21.el9.tuxcare.els9.aarch64.rpm
    sha:63244b96f64e33586e6aab31630bf5e9334b34af55b9eb8244ee7800fde5ba34
  • poppler-utils-21.01.0-21.el9.tuxcare.els9.i686.rpm
    sha:a2db8aea6679a18568a026db6223388adf798edaf286321ec528d2ef14882bff
  • poppler-utils-21.01.0-21.el9.tuxcare.els9.x86_64.rpm
    sha:34782f89db1900e9847e9198a29716ce46e5422bda0e2db01ee17f85a4aa6397
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.