Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2026:0126 | Mondoo Vulnerability Intelligence

RHSA-2026:0126

LOW3.3

Red Hat Security Advisory: poppler security update

Published Jan 7, 2026

Modified 1 weeks ago

Fix available

Affected Packages

Red Hat:enterprise_linux:9::appstreampoppler

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-cpp

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-cpp-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-cpp-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-debugsource

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-glib

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-glib-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-glib-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-glib-doc

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-qt5

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-qt5-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-qt5-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-utils

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::appstreampoppler-utils-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-cpp

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-cpp-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-cpp-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-debugsource

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-glib

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-glib-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-glib-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-glib-doc

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-qt5

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-qt5-debuginfo

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-qt5-devel

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-utils

Fixed in:

0:21.01.0-23.el9_7

Red Hat:enterprise_linux:9::crbpoppler-utils-debuginfo

Fixed in:

0:21.01.0-23.el9_7

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0126 REPORThttps://access.redhat.com/security/cve/CVE-2025-32365 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2357656 ARTICLEhttps://gitlab.freedesktop.org/poppler/poppler/-/issues/1577 ARTICLEhttps://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1792 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-32365 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0126.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-32365

CVSS Analysis

CVSS v3.1

3.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

LowA:L

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Upstream

CVE-2025-32365

Ecosystems

Red Hat enterprise_linux 9 appstream Red Hat enterprise_linux 9 crb

Timeline

PublishedJan 7, 2026

ModifiedJan 7, 2026