Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20375-1

Опубликовано: 17 мар. 2026
Источник: suse-cvrf

Описание

Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues:

Changes in python-PyPDF2:

  • CVE-2025-31826: Fixed denial of service due to excessive memory consumption via crafted PDF (bsc#1259508).

Список пакетов

openSUSE Leap 16.0
python313-PyPDF2-2.11.1-bp160.4.1

Описание

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. This vulnerability is fixed in 6.8.0.


Затронутые продукты
openSUSE Leap 16.0:python313-PyPDF2-2.11.1-bp160.4.1

Ссылки