Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Red Hat issued a security advisory (RHSA-2026:80172) for Red Hat Hardened Images RPMs that includes an update to the poppler package and related components to address CVE-2026-107705. The advisory lists updated RPMs for various poppler packages across aarch64 and x86_64 architectures. The vulnerability is categorized under CWE-120, which relates to buffer errors. No CVSS score is provided. The advisory references the availability of updated packages but does not detail the nature of the vulnerability beyond the CVE identifier.

The vulnerability affects the poppler package used in Red Hat Hardened Images. Given the CWE-120 classification, it likely involves a buffer-related issue that could potentially lead to memory corruption or related impacts. The severity is assessed as medium by the vendor. There are no reports of active exploitation in the wild at this time.

Red Hat has released updated poppler RPM packages to address CVE-2026-107705. Users of Red Hat Hardened Images should apply these updates promptly by following Red Hat's official update procedures. No additional mitigation steps are indicated in the advisory.