OPENSUSE-SU-2026:20333-1: python-PyPDF2&distro=openSUSE Leap 16.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2026:20333-1 is a vulnerability in python-PyPDF2&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 06-03-2026PublishedVulnerability first disclosed.
- 27-08-2026Last modifiedVulnerability information updated.
Description
Security update for python-PyPDF2 This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-27628: Fixed infinite loop when loading circular /Prev entries in cross-reference streams (bsc#1258940) - CVE-2026-27888: Fixed issue where manipulated FlateDecode XFA streams can exhaust RAM (bsc#1258934) - CVE-2025-55197: Fixed denial of service via craft PDF (bsc#1248089) - CVE-2026-27024: Fixed infinite loop when processing TreeObject (bsc#1258691) - CVE-2026-27025: Fixed long runtimes/large memory usage for large /ToUnicode streams (bsc#1258692) - CVE-2026-27026: Fixed long runtimes for malformed FlateDecode streams (bsc#1258693) - Convert to pip-based build
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- python-PyPDF2&distro=openSUSE Leap 16.0< 2.11.1-bp160.2.1
1 vendor · 1 product