Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
32b7ef6e by Salvatore Bonaccorso at 2026-02-26T21:09:56+01:00
Add new pypdf issue (CVE-2026-27888)
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -99,7 +99,11 @@ CVE-2026-27899 (WireGuard Portal (or wg-portal) is a
web-based configuration por
CVE-2026-27896 (The Go MCP SDK used Go's standard encoding/json.Unmarshal for
JSON-RPC ...)
NOT-FOR-US: Go MCP SDK
CVE-2026-27888 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.7. ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-x7hp-r3qg-r3cj
+ NOTE: https://github.com/py-pdf/pypdf/pull/3658
+ NOTE: Fixed by:
https://github.com/py-pdf/pypdf/commit/7a4c8246ed48d9d328fb596942271da47b6d109c
(6.7.3)
CVE-2026-27887 (Spin is an open source developer tool for building and running
serverl ...)
TODO: check
CVE-2026-27884 (NetExec is a network execution tool. Prior to version 1.5.1,
the modul ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/32b7ef6e4be9516cd52005f1ab529bd494f2bbfd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/32b7ef6e4be9516cd52005f1ab529bd494f2bbfd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
