[Git][security-tracker-team/security-tracker][master] Add Debian bug references for pypdf issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jun 23 21:26:48 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
37500dbc by Salvatore Bonaccorso at 2026-06-23T22:26:36+02:00
Add Debian bug references for pypdf issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -415,17 +415,17 @@ CVE-2026-54911 (UltraJSON is a fast JSON encoder and decoder written in pure C w
 	NOTE: https://github.com/ultrajson/ultrajson/security/advisories/GHSA-3j69-69wj-xqx2
 	NOTE: https://github.com/ultrajson/ultrajson/commit/169eaf36b1116fece5034ee79a7a0ef3f6deedcf (5.13.0)
 CVE-2026-54651 (pypdf is a free and open-source pure-python PDF library. Prior to 6.13 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1140629)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9xf-7f8q-9mcj
 	NOTE: https://github.com/py-pdf/pypdf/pull/3839
 CVE-2026-54531 (pypdf is a free and open-source pure-python PDF library. Prior to 6.13 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1140629)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-m2v9-299j-rv96
 	NOTE: https://github.com/py-pdf/pypdf/pull/3830
 CVE-2026-54530 (pypdf is a free and open-source pure-python PDF library. Prior to 6.13 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1140629)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-52x6-gq3r-vpf4
 	NOTE: https://github.com/py-pdf/pypdf/pull/3830
@@ -444,12 +444,12 @@ CVE-2026-53923 (vLLM is an inference and serving engine for large language model
 CVE-2026-49468 (LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or  ...)
 	NOT-FOR-US: LiteLLM
 CVE-2026-49461 (pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1140629)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-j543-4vmf-qm7v
 	NOTE: https://github.com/py-pdf/pypdf/pull/3805
 CVE-2026-49460 (pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1140629)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-5hgr-hg42-57jg
 	NOTE: https://github.com/py-pdf/pypdf/pull/3806



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37500dbcde2e994ce454d053be5779e6b77c9345

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37500dbcde2e994ce454d053be5779e6b77c9345
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260623/a2853edc/attachment.htm>


More information about the debian-security-tracker-commits mailing list