[Git][security-tracker-team/security-tracker][master] Add new pypdf issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bac6aa7b by Salvatore Bonaccorso at 2026-10-22T20:34:47+02:00
Add new pypdf issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -809,19 +809,48 @@ CVE-2026-113797 (Electron is a framework for writing cross-platform desktop appl
 CVE-2026-113796 (Electron is a framework for writing cross-platform desktop application ...)
 	- electron <itp> (bug #842420)
 CVE-2026-113795 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-7mh2-4gg2-979f
+	NOTE: https://github.com/py-pdf/pypdf/pull/4173
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/80a84d4be6022d910874ccb0d2365400f3f0e185 (6.20.0)
 CVE-2026-113794 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-39mj-jf6j-2qj3
+	NOTE: https://github.com/py-pdf/pypdf/issues/4169
+	NOTE: https://github.com/py-pdf/pypdf/pull/4170
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/37e1cd681744bac38b159f7e1c614eee8d639c58 (6.20.0)
 CVE-2026-113793 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-9mx8-4j7g-633p
+	NOTE: https://github.com/py-pdf/pypdf/pull/4188
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/c9c35b4471c2eb5fe078094f6c816e69d4ed25a0 (6.20.1)
 CVE-2026-113792 (pypdf is a free and open-source pure-python PDF library. Prior to 6.20 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-qfv9-64jg-mh7p
+	NOTE: https://github.com/py-pdf/pypdf/pull/4188
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/c9c35b4471c2eb5fe078094f6c816e69d4ed25a0 (6.20.1)
 CVE-2026-113791 (pypdf is a free and open-source pure-python PDF library. Prior to 6.21 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-cgf9-327m-v77c
+	NOTE: https://github.com/py-pdf/pypdf/pull/4218
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/18bd2981a74479483a0b9507602c58a63d6c9b12 (6.21.0)
 CVE-2026-113790 (pypdf is a free and open-source pure-python PDF library. Prior to 6.21 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-f54x-cmq8-qg57
+	NOTE: https://github.com/py-pdf/pypdf/pull/4218
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/18bd2981a74479483a0b9507602c58a63d6c9b12 (6.21.0)
 CVE-2026-113789 (pypdf is a free and open-source pure-python PDF library. Prior to 6.21 ...)
-	TODO: check
+	- pypdf 6.21.0-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-6vvc-x485-93v7
+	NOTE: https://github.com/py-pdf/pypdf/pull/4219
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/5ef728f0e16d225c853e89f861ba0a67402fe3f2 (6.21.0)
 CVE-2026-113788 (Lagoon is an application delivery platform for Kubernetes. Versions pr ...)
 	NOT-FOR-US: Lagoon
 CVE-2026-113787 (odf-kit allows users to generate, fill, read, and convert OpenDocument ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bac6aa7ba57ebf8ddd00ffb9f8987a4e45d021ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bac6aa7ba57ebf8ddd00ffb9f8987a4e45d021ba
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/5a345257/attachment-0001.htm>