USN-6280-1: PyPDF2 vulnerability
10 August 2023
PyPDF2 could be made to crash if it opened a specially crafted file.
- pypdf2 - Pure-Python library built as a PDF toolkit (Python 2)
It was discovered that PyPDF2 incorrectly handled PDF files with certain
markers. If a user or automated system were tricked into processing a
specially crafted file, an attacker could possibly use this issue to
consume system resources, resulting in a denial of service.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.