Update Info

openSUSE-2026-314


Security update for python-PyPDF2


Type: security
Severity: moderate
Issued: 2026-08-30
Description:
This update for python-PyPDF2 fixes the following issues:

- CVE-2026-48735: python-pypdf: Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage (boo#1266821)
- CVE-2026-48156: python-pypdf: Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes (boo#1266822)
- CVE-2023-36464: Possible Infinite Loop when a comment isn't followed by a character (boo#1212797)
- CVE-2026-41312: python-pypdf: crafed PDF can lead to resources exhaustion (boo#1262675)
- CVE-2026-41314: python-pypdf: manipulated FlateDecode image dimensions can lead to RAM exhaustion (boo#1262669)
- CVE-2026-41168: python-pypdf: crafed PDF with cross-reference streams can lead to long runtimes (boo#1262676)


              

Packages


  • python-PyPDF2-1.26.0-bp157.3.3.1