[Git][security-tracker-team/security-tracker][master] Add two new pypdf issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
00cbcfb1 by Salvatore Bonaccorso at 2026-07-09T10:25:06+02:00
Add two new pypdf issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46,9 +46,17 @@ CVE-2026-59939 (httplib2 is a comprehensive HTTP client library for Python. Prio
 	NOTE: https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3
 	NOTE: Fixed by: https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427 (v0.32.0)
 CVE-2026-59936 (pypdf is a free and open-source pure-python PDF library. Prior to 6.14 ...)
-	TODO: check
+	- pypdf <unfixed>
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-5xf7-4p34-54qr
+	NOTE: https://github.com/py-pdf/pypdf/pull/3891
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/ec3b14596186c40caca7cf8ab9b2155203e01b5b (6.14.1)
 CVE-2026-59935 (pypdf is a free and open-source pure-python PDF library. Prior to 6.14 ...)
-	TODO: check
+	- pypdf <unfixed>
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-g867-7843-wf8q
+	NOTE: https://github.com/py-pdf/pypdf/pull/3892
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/5a33a46416aa1ae6c025ff90a3cca57631fdafd2 (6.14.2)
 CVE-2026-59822 (LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or  ...)
 	NOT-FOR-US: LiteLLM
 CVE-2026-59821 (LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/00cbcfb10f3f442d729cd9dc8b000043d415e927

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/00cbcfb10f3f442d729cd9dc8b000043d415e927
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260709/6961b010/attachment.htm>