SUSE-SU-2026:5176-1: Security update for poppler, poppler-qt5
Published Nov 10, 2026
·Updated
This update for poppler, poppler-qt5 fixes the following issues:
- CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532). - CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531). - CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330). - CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331). - CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844).
Affected Software
1 affected componentFixes available
suse/poppler<0.79.0-150200.3.56.1
0.79.0-150200.3.56.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/popplerto a version that resolves this vulnerability.Fixed in 0.79.0-150200.3.56.1
Event History
Nov 10, 2026
Advisory Published
via OSV·05:33 PM
Data Sourced
via OSV·05:33 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.