Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing two vulnerabilities identified as CVE-2026-102620 and CVE-2026-102621 in the poppler package. The update includes multiple poppler-related RPMs for aarch64 and x86_64 architectures. No specific affected versions are provided. The advisory does not specify detailed technical impact or exploitation status but categorizes the severity as medium.
AI Analysis
Technical Summary
This Red Hat security advisory updates various poppler RPM packages within Red Hat Hardened Images to address two security vulnerabilities, CVE-2026-102620 and CVE-2026-102621. The update affects multiple poppler components including poppler-cpp, poppler-glib, poppler-qt6, and poppler-utils across aarch64 and x86_64 architectures. The advisory references Red Hat's official errata RHSA-2026:74469 and provides updated package versions (26.08.0-1.2.hum1). No CVSS score is provided, and no known exploits are reported in the wild.
Potential Impact
The vulnerabilities affect the poppler library and related components used in Red Hat Hardened Images. The advisory assigns a medium severity level but does not detail the specific impact or exploitation methods. There are no known exploits in the wild at the time of publication.
Mitigation Recommendations
Red Hat has released updated poppler RPM packages (version 26.08.0-1.2.hum1) that address the vulnerabilities CVE-2026-102620 and CVE-2026-102621. Users of Red Hat Hardened Images should apply these updates as per Red Hat's official guidance at https://images.redhat.com/. No additional mitigation steps are indicated or required beyond applying the provided update.
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Description
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing two vulnerabilities identified as CVE-2026-102620 and CVE-2026-102621 in the poppler package. The update includes multiple poppler-related RPMs for aarch64 and x86_64 architectures. No specific affected versions are provided. The advisory does not specify detailed technical impact or exploitation status but categorizes the severity as medium.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory updates various poppler RPM packages within Red Hat Hardened Images to address two security vulnerabilities, CVE-2026-102620 and CVE-2026-102621. The update affects multiple poppler components including poppler-cpp, poppler-glib, poppler-qt6, and poppler-utils across aarch64 and x86_64 architectures. The advisory references Red Hat's official errata RHSA-2026:74469 and provides updated package versions (26.08.0-1.2.hum1). No CVSS score is provided, and no known exploits are reported in the wild.
Potential Impact
The vulnerabilities affect the poppler library and related components used in Red Hat Hardened Images. The advisory assigns a medium severity level but does not detail the specific impact or exploitation methods. There are no known exploits in the wild at the time of publication.
Mitigation Recommendations
Red Hat has released updated poppler RPM packages (version 26.08.0-1.2.hum1) that address the vulnerabilities CVE-2026-102620 and CVE-2026-102621. Users of Red Hat Hardened Images should apply these updates as per Red Hat's official guidance at https://images.redhat.com/. No additional mitigation steps are indicated or required beyond applying the provided update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:74469
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-102621"]
- State
- PUBLISHED
Threat ID: 6abeb3f3a43b0b3b89ed4838
Added to database: 10/01/2026, 19:26:43 UTC
Last enriched: 10/01/2026, 19:34:04 UTC
Last updated: 10/02/2026, 03:45:56 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.