Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20794-1

Опубликовано: 25 мая 2026
Источник: suse-cvrf

Описание

Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues:

Changes in python-PyPDF2:

  • CVE-2026-41312: Fixed issue where crafed PDF can lead to resources exhaustion (bsc#1262675)
  • CVE-2026-41314: Fixed a denial of service via manipulated FlateDecode image dimensions can lead to RAM exhaustion (bsc#1262669)
  • CVE-2026-41168: Fixed a denial of service via crafed PDF with cross-reference streams (bsc#1262676)

Список пакетов

openSUSE Leap 16.0
python313-PyPDF2-2.11.1-bp160.7.1

Ссылки

Описание

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large `/Size` values or object streams with wrong large `/N` values. This has been fixed in pypdf 6.10.1. As a workaround, one may apply the changes from the patch manually.

Затронутые продукты
openSUSE Leap 16.0:python313-PyPDF2-2.11.1-bp160.7.1
Ссылки

Описание

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream compressed using `/FlateDecode` with a `/Predictor` unequal 1 and large predictor parameters. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.

Затронутые продукты
openSUSE Leap 16.0:python313-PyPDF2-2.11.1-bp160.7.1
Ссылки

Описание

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.

Затронутые продукты
openSUSE Leap 16.0:python313-PyPDF2-2.11.1-bp160.7.1
Ссылки