shield Security update for python-pypdf2

openSUSE-2026-314

This update for python-PyPDF2 fixes the following issues: - CVE-2026-48735: python-pypdf: Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage (boo#1266821) - CVE-2026-48156: python-pypdf: Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes (boo#1266822) - CVE-2023-36464: Possible Infinite Loop when a comment isn't followed by a character (boo#1212797) - CVE-2026-41312: python-pypdf: crafed PDF can lead to resources exhaustion (boo#1262675) - CVE-2026-41314: python-pypdf: manipulated FlateDecode image dimensions can lead to RAM exhaustion (boo#1262669) - CVE-2026-41168: python-pypdf: crafed PDF with cross-reference streams can lead to long runtimes (boo#1262676)

• Release Date
  Aug 30 2026
• References
  Bugzilla: 1262675, 1262676, 1262669, 1266821, 1212797, 1266822
  CVEs: CVE-2026-48735, CVE-2026-41312, CVE-2026-48156, CVE-2026-41314, CVE-2023-36464, CVE-2026-41168
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.7 x86_64

• Packages
  python3-PyPDF2
  PDF toolkit

  1.26.0-bp157.3.3.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  python3-PyPDF2
  PDF toolkit

  1.26.0-bp157.3.3.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  python3-PyPDF2
  PDF toolkit

  1.26.0-bp157.3.3.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  python3-PyPDF2
  PDF toolkit

  1.26.0-bp157.3.3.1 lock rpm