RLSA-2024:9167
Moderate: poppler security update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.
Security Fix(es):
- poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.
What each source reports
OSV No score
Moderate: poppler security update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.
Security Fix(es):
- poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.
- Record
RLSA-2024:9167- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
popplerRocky Linux:9 |
before 0:21.01.0-21.el9 | 0:21.01.0-21.el9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RLSA-2024:9167 is a vulnerability with no CVSS score yet in poppler, published March 17, 2025. No source lists public exploit code. Fixed in poppler 0:21.01.0-21.el9.