openSUSE-SU-2026:20333-1

csafDEsuse_csaf

Security update for python-PyPDF2

view advisory published 2026-03-06

Security update for python-PyPDF2

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-27888UShigh7.5—
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requir…
CVE-2026-27628UShigh7.5—
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires read…
CVE-2026-27026USmedium5.5—
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malfo…
CVE-2026-27025USmedium5.5—
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consu…
CVE-2026-27024USmedium5.5—
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires acce…
CVE-2025-55197UShigh7.5—
pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-PyPDF2-2.11.1-bp160.2.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan