[Git][security-tracker-team/security-tracker][master] Add Debian bug references for pypdf issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri May 29 08:06:36 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
84c8d62a by Salvatore Bonaccorso at 2026-05-29T09:05:55+02:00
Add Debian bug references for pypdf issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -125,7 +125,7 @@ CVE-2026-49238 (An issue was discovered in Canonical Multipass before version 1.
 CVE-2026-49237 (An issue was discovered in Canonical Multipass for macOS before versio ...)
 	NOT-FOR-US: Multipass
 CVE-2026-48735 (pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1138192)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-wjqc-6w8f-h24c
 	NOTE: https://github.com/py-pdf/pypdf/pull/3796
@@ -145,12 +145,12 @@ CVE-2026-48522 (PyJWT is a JSON Web Token implementation in Python. Prior to 2.1
 	- pyjwt <unfixed>
 	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-993g-76c3-p5m4
 CVE-2026-48156 (pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1138193)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-248m-82v9-q6g6
 	NOTE: https://github.com/py-pdf/pypdf/pull/3791
 CVE-2026-48155 (pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...)
-	- pypdf <unfixed>
+	- pypdf <unfixed> (bug #1138194)
 	- pypdf2 <removed>
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-cj93-chg6-vgv8
 	NOTE: https://github.com/py-pdf/pypdf/pull/3790



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84c8d62a68f56b9702cccefaca88b0f6e326cf84

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84c8d62a68f56b9702cccefaca88b0f6e326cf84
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260529/cd9d248a/attachment.htm>


More information about the debian-security-tracker-commits mailing list