Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bc188554 by Salvatore Bonaccorso at 2026-10-01T11:14:40+02:00
Add new batch of pypdf issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -186,21 +186,53 @@ CVE-2026-103001 (PyJWT is a Python implementation of JSON
Web Token standards. F
NOTE: https://github.com/jpadilla/pyjwt/issues/679
NOTE: Fixed by:
https://github.com/jpadilla/pyjwt/commit/0c87c8c8b1a74cac99ad8115f3050efcb7fbed35
(2.14.0)
CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c
+ NOTE: https://github.com/py-pdf/pypdf/pull/4096
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a
(6.19.0)
CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
+ NOTE: https://github.com/py-pdf/pypdf/pull/4081
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3
(6.19.0)
CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj
+ NOTE: https://github.com/py-pdf/pypdf/pull/4087
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7
(6.19.0)
CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3
+ NOTE: https://github.com/py-pdf/pypdf/pull/4073
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79
(6.18.1)
CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q
+ NOTE: https://github.com/py-pdf/pypdf/pull/4072
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5
(6.18.1)
CVE-2026-102995 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3h-c4fm-7vvf
+ NOTE: https://github.com/py-pdf/pypdf/pull/4071
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/319d0b823ce2c311a2435e9fd93c13994d32bb51
(6.18.1)
CVE-2026-102994 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246
+ NOTE: https://github.com/py-pdf/pypdf/pull/4055
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e
(6.18.0)
CVE-2026-102993 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.17 ...)
- TODO: check
+ - pypdf 6.19.0-1
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-qv6h-rv94-w285
+ NOTE: https://github.com/py-pdf/pypdf/pull/4047
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/89db7c4fe9315ecc964bfdf05a4e8c4b94175163
(6.17.0)
CVE-2026-102992 (piscina is a node.js worker pool implementation. Prior to
4.9.4, 5.3.2 ...)
TODO: check
CVE-2026-102991 (Mako is a template library written in Python. Prior to 1.4.2,
on Windo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc1885546f38542aaba9f861f02189fbd9c8cdc8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc1885546f38542aaba9f861f02189fbd9c8cdc8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
