Ubuntu fixes poppler PDF crash bug in four supported releases

Brief written by the FOSSWire AI editor from Ubuntu How we write

October 21, 2026 1 min read 1 reads

Key Takeaway

Ubuntu patched a denial-of-service vulnerability in poppler, its PDF rendering library, affecting all currently supported releases from 22.04 LTS through 26.10.

Summary

Ubuntu has issued security notice USN-8950-1 for a poppler vulnerability where incorrect handling of password length limits during PDF decryption could trigger crashes. The flaw, tracked as CVE-2026-107705, allows denial of service through specially crafted encrypted PDF files. Updated packages are now available for Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10.

Affected versions and fixes

CVE-2026-107705: poppler mishandles password length limits when decrypting encrypted PDFs
Impact: denial of service (application crash) via crafted PDF file
Affected Ubuntu releases: 22.04 LTS (jammy), 24.04 LTS (noble), 26.04 LTS (resolute), 26.10 (stonking)
Fixed package versions: libpoppler118 22.02.0-2ubuntu0.15, libpoppler134 24.02.0-1ubuntu9.11, libpoppler156 26.01.0-2ubuntu0.3, libpoppler162 26.07.0-2ubuntu1.1

Why it matters

poppler is a core PDF rendering library used by numerous Linux applications including document viewers, browsers, and office suites. The broad release coverage reflects its position in the desktop software stack.

Original reference: ubuntu.com →