PyPDF2 could be made to crash if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-6280-1 August 10, 2023 pypdf2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) Summary: PyPDF2 could be made to crash if it opened a specially crafted file. Software Description: - pypdf2: Pure-Python library built as a PDF toolkit (Python 3) Details: It was discovered that PyPDF2 incorrectly handled PDF files with certain markers. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-pypdf2 1.26.0-4ubuntu0.22.04.2 Ubuntu 20.04 LTS: python-pypdf2 1.26.0-3ubuntu1.20.04.2 python3-pypdf2 1.26.0-3ubuntu1.20.04.2 Ubuntu 18.04 LTS (Available with Ubuntu Pro): python-pypdf2 1.26.0-2ubuntu0.1~esm2 python3-pypdf2 1.26.0-2ubuntu0.1~esm2 Ubuntu 16.04 LTS (Available with Ubuntu Pro): python-pypdf2 1.25.1-1ubuntu0.1~esm2 python3-pypdf2 1.25.1-1ubuntu0.1~esm2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6280-1 CVE-2023-36810 Package Information: https://launchpad.net/ubuntu/+source/pypdf2/1.26.0-4ubuntu0.22.04.2 https://launchpad.net/ubuntu/+source/pypdf2/1.26.0-3ubuntu1.20.04.2 . Ubuntu 22.04 to 16.04 LTS vulnerable due to pypdf2 exploitfrom malicious files. Urgent system patches needed.. pypdf2, Denial Of Service, Ubuntu Update. . LinuxSecurity.com Team
Quadratic runtime with malformed PDFs missing xref marker has been fixed in PyPDF2, a pure Python PDF library. For Debian 10 buster, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3497-1
PyPDF2 could be made to crash if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-6176-1 June 19, 2023 pypdf2 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) Summary: PyPDF2 could be made to crash if it opened a specially crafted file. Software Description: - pypdf2: Pure-Python library built as a PDF toolkit (Python 3) Details: It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-pypdf2 1.26.0-4ubuntu0.22.04.1 Ubuntu 20.04 LTS: python-pypdf2 1.26.0-3ubuntu1.20.04.1 python3-pypdf2 1.26.0-3ubuntu1.20.04.1 Ubuntu 18.04 LTS (Available with Ubuntu Pro): python-pypdf2 1.26.0-2ubuntu0.1~esm1 python3-pypdf2 1.26.0-2ubuntu0.1~esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro): python-pypdf2 1.25.1-1ubuntu0.1~esm1 python3-pypdf2 1.25.1-1ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6176-1 CVE-2022-24859 Package Information: https://launchpad.net/ubuntu/+source/pypdf2/1.26.0-4ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/pypdf2/1.26.0-3ubuntu1.20.04.1 . The PyPDF2 library may experience crashes when processing specially designed files.To prevent this denial of service vulnerability, ensure your Ubuntu system is fully updated.. pypdf2 Denial Of Service, Ubuntu Security Advisory, Critical Security Flaw. . Severity: Critical. LinuxSecurity.com Team
Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed. . -------------------------------------------------------------------------Debian LTS Advisory DLA-3451-1
Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed. . -------------------------------------------------------------------------Debian LTS Advisory DLA-3039-1
Get the latest Linux and open source security news straight to your inbox.