[Git][security-tracker-team/security-tracker][master] Add CVE-2026-84309/pypdf

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ca44bafc by Salvatore Bonaccorso at 2026-09-02T22:54:39+02:00
Add CVE-2026-84309/pypdf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -608,7 +608,11 @@ CVE-2026-84361 (Composer is a dependency Manager for the PHP language. From 1.0
 	NOTE: Fixed by: https://github.com/composer/composer/commit/0aac50528e83ed635cf788333635897469440220 (2.10.3)
 	NOTE: Fixed by: https://github.com/composer/composer/commit/199ad81a9cc6a2a5164ad79a8da26b2e19e521af (2.2.30)
 CVE-2026-84309 (pypdf is a free and open-source pure-python PDF library. Prior to 6.16 ...)
-	TODO: check
+	- pypdf <unfixed>
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-jp53-mhqp-8xcg
+	NOTE: https://github.com/py-pdf/pypdf/pull/3964
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/c9ba557d565d57c53a0b3a0be06c0a4c29b0559b (6.16.0)
 CVE-2026-84308 (phpseclib is a PHP secure communications library. Prior to 3.0.57 and  ...)
 	- php-phpseclib4 4.0.1-1
 	- php-phpseclib3 3.0.57-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca44bafc549d34bf74095f13a5ea0446a9339ed7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca44bafc549d34bf74095f13a5ea0446a9339ed7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/bed40ba6/attachment.htm>