[Git][security-tracker-team/security-tracker][master] pypdf/bookworm

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f6a757c2 by Bastien Roucariès at 2026-10-10T19:06:06+02:00
pypdf/bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8998,6 +8998,7 @@ CVE-2026-103001 (PyJWT is a Python implementation of JSON Web Token standards. F
 CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <postponed> (Minor issue)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <not-affected> (Page label support introduced in pypdf 3.2.0)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c
@@ -9006,6 +9007,7 @@ CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library. Prior
 CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <not-affected> (Attachment retrieval API introduced in pypdf 3.5.0)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <not-affected> (Attachment retrieval API introduced in pypdf 3.5.0)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
@@ -9014,6 +9016,7 @@ CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library. Prior
 CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <not-affected> (Appearance stream generation introduced in pypdf 3.10.0)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <not-affected> (Appearance stream generation introduced in pypdf 3.10.0)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj
@@ -9022,6 +9025,7 @@ CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library. Prior
 CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <postponed> (Minor issue, DoS)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <postponed> (Minor issue, DoS)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3
@@ -9030,6 +9034,7 @@ CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library. Prior
 CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <not-affected> (Per-glyph /Widths map introduced in pypdf 4.0.0)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <not-affected> (Per-glyph /Widths map introduced in pypdf 4.0.0)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q
@@ -9038,6 +9043,7 @@ CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library. Prior
 CVE-2026-102995 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
 	- pypdf 6.19.0-1
 	[trixie] - pypdf <no-dsa> (Minor issue)
+	[bookworm] - pypdf <postponed> (Minor issue, DoS)
 	- pypdf2 <removed>
 	[bookworm] - pypdf2 <postponed> (Minor issue, DoS)
 	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3h-c4fm-7vvf



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6a757c2da87b8dc03624e27b816b7a3440f010d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6a757c2da87b8dc03624e27b816b7a3440f010d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/01f5164b/attachment.htm>