openSUSE-SU-2026:22219-1

Dashboard / Vulnerabilities / openSUSE-SU-2026:22219-1

openSUSE-SU-2026:22219-1

Summary: Security update for python-pypdf

Details: This update for python-pypdf fixes the following issues: Changes in python-pypdf: - CVE-2026-119209: negative /Index values and multiplied xref streams can lead to clamp bypass and server memory exhaustion (bsc#1288950) - CVE-2026-119208: trusting forged /Count values in encrypted PDF page trees can lead to excessive resource consumption and denial of service (bsc#1288951) - CVE-2026-119207: nested exception text accumulation in strict mode parsing can lead to memory amplification and application denial of service (bsc#1288952) - CVE-2026-119206: repeated sequential /Nums scanning in page_labels resolution can lead to algorithmic complexity attacks and denial of service (bsc#1288944) - CVE-2026-119205: misdirected reference tracking during dictionary cloning can lead to cycle-detection bypass and thread-hanging infinite loops (bsc#1288943) - CVE-2026-119204: unbounded resource entry copying during page-tree flattening can lead to excessive memory allocation and denial of service (bsc#1288942) - CVE-2026-119203: unterminated trailer search in incomplete cross-reference tables can lead to an infinite loop and thread-blocking denial of service (bsc#1288941)

References: , https://bugzilla.suse.com/1288941, https://bugzilla.suse.com/1288942, https://bugzilla.suse.com/1288943, https://bugzilla.suse.com/1288944, https://bugzilla.suse.com/1288950, https://bugzilla.suse.com/1288951, https://bugzilla.suse.com/1288952, https://www.suse.com/security/cve/CVE-2026-119203, https://www.suse.com/security/cve/CVE-2026-119204, https://www.suse.com/security/cve/CVE-2026-119205, https://www.suse.com/security/cve/CVE-2026-119206, https://www.suse.com/security/cve/CVE-2026-119207, https://www.suse.com/security/cve/CVE-2026-119208, https://www.suse.com/security/cve/CVE-2026-119209