Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f6a757c2 by Bastien Roucariès at 2026-10-10T19:06:06+02:00
pypdf/bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8998,6 +8998,7 @@ CVE-2026-103001 (PyJWT is a Python implementation of JSON
Web Token standards. F
CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <postponed> (Minor issue)
- pypdf2 <removed>
[bookworm] - pypdf2 <not-affected> (Page label support introduced in
pypdf 3.2.0)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c
@@ -9006,6 +9007,7 @@ CVE-2026-103000 (pypdf is a free and open-source
pure-python PDF library. Prior
CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <not-affected> (Attachment retrieval API introduced
in pypdf 3.5.0)
- pypdf2 <removed>
[bookworm] - pypdf2 <not-affected> (Attachment retrieval API introduced
in pypdf 3.5.0)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
@@ -9014,6 +9016,7 @@ CVE-2026-102999 (pypdf is a free and open-source
pure-python PDF library. Prior
CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.19 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <not-affected> (Appearance stream generation
introduced in pypdf 3.10.0)
- pypdf2 <removed>
[bookworm] - pypdf2 <not-affected> (Appearance stream generation
introduced in pypdf 3.10.0)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj
@@ -9022,6 +9025,7 @@ CVE-2026-102998 (pypdf is a free and open-source
pure-python PDF library. Prior
CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <postponed> (Minor issue, DoS)
- pypdf2 <removed>
[bookworm] - pypdf2 <postponed> (Minor issue, DoS)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3
@@ -9030,6 +9034,7 @@ CVE-2026-102997 (pypdf is a free and open-source
pure-python PDF library. Prior
CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <not-affected> (Per-glyph /Widths map introduced in
pypdf 4.0.0)
- pypdf2 <removed>
[bookworm] - pypdf2 <not-affected> (Per-glyph /Widths map introduced in
pypdf 4.0.0)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q
@@ -9038,6 +9043,7 @@ CVE-2026-102996 (pypdf is a free and open-source
pure-python PDF library. Prior
CVE-2026-102995 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.18 ...)
- pypdf 6.19.0-1
[trixie] - pypdf <no-dsa> (Minor issue)
+ [bookworm] - pypdf <postponed> (Minor issue, DoS)
- pypdf2 <removed>
[bookworm] - pypdf2 <postponed> (Minor issue, DoS)
NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3h-c4fm-7vvf
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6a757c2da87b8dc03624e27b816b7a3440f010d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6a757c2da87b8dc03624e27b816b7a3440f010d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
