[Git][security-tracker-team/security-tracker][master] Add new batch of pypdf issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bc188554 by Salvatore Bonaccorso at 2026-10-01T11:14:40+02:00
Add new batch of pypdf issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -186,21 +186,53 @@ CVE-2026-103001 (PyJWT is a Python implementation of JSON Web Token standards. F
 	NOTE: https://github.com/jpadilla/pyjwt/issues/679
 	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/0c87c8c8b1a74cac99ad8115f3050efcb7fbed35 (2.14.0)
 CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c
+	NOTE: https://github.com/py-pdf/pypdf/pull/4096
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a (6.19.0)
 CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
+	NOTE: https://github.com/py-pdf/pypdf/pull/4081
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3 (6.19.0)
 CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj
+	NOTE: https://github.com/py-pdf/pypdf/pull/4087
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7 (6.19.0)
 CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3
+	NOTE: https://github.com/py-pdf/pypdf/pull/4073
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79 (6.18.1)
 CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q
+	NOTE: https://github.com/py-pdf/pypdf/pull/4072
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5 (6.18.1)
 CVE-2026-102995 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3h-c4fm-7vvf
+	NOTE: https://github.com/py-pdf/pypdf/pull/4071
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/319d0b823ce2c311a2435e9fd93c13994d32bb51 (6.18.1)
 CVE-2026-102994 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246
+	NOTE: https://github.com/py-pdf/pypdf/pull/4055
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e (6.18.0)
 CVE-2026-102993 (pypdf is a free and open-source pure-python PDF library. Prior to 6.17 ...)
-	TODO: check
+	- pypdf 6.19.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-qv6h-rv94-w285
+	NOTE: https://github.com/py-pdf/pypdf/pull/4047
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/89db7c4fe9315ecc964bfdf05a4e8c4b94175163 (6.17.0)
 CVE-2026-102992 (piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2 ...)
 	TODO: check
 CVE-2026-102991 (Mako is a template library written in Python. Prior to 1.4.2, on Windo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc1885546f38542aaba9f861f02189fbd9c8cdc8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc1885546f38542aaba9f861f02189fbd9c8cdc8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/516a6afb/attachment.htm>