-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 3 Jun 2022 11:39:43 CEST Source: pypdf2 Binary: python-pypdf2 python3-pypdf2 Architecture: source Version: 1.26.0-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: python-pypdf2 - Pure-Python library built as a PDF toolkit (Python 2) python3-pypdf2 - Pure-Python library built as a PDF toolkit (Python 3) Checksums-Sha1: fbab48cf00fb3acabefe40735741a88ba81ac65b 1992 pypdf2_1.26.0-2+deb9u1.dsc 29859e086b6e78459feb660ba24f3b22773e11c1 199539 pypdf2_1.26.0.orig.tar.gz 24939f4367eb9c3bc0c8ea8b8fe791980f753393 4304 pypdf2_1.26.0-2+deb9u1.debian.tar.xz 92a753b8b35b5b02f26e1b4bf17d6634309d0ce2 7123 pypdf2_1.26.0-2+deb9u1_amd64.buildinfo Checksums-Sha256: a26ccd97e17b73153abcca78cc160d3df7c8faf24993b6f84523b29717316036 1992 pypdf2_1.26.0-2+deb9u1.dsc 140b1fed792f487f2fd814eb0e832a5b6ef5ae362da302c1fc5a9786d5acb469 199539 pypdf2_1.26.0.orig.tar.gz 14433855cd5dec79ada09ffe103c2070fded9f952c2f00f06ce035ce4bb661a7 4304 pypdf2_1.26.0-2+deb9u1.debian.tar.xz c448bce9b0964b617878656702d9e43a735f46def681bf59230f20fc31fd36b4 7123 pypdf2_1.26.0-2+deb9u1_amd64.buildinfo Changes: pypdf2 (1.26.0-2+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2022-24859: Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed. Files: fe0bb81efb4fb3b18a3cd4b277ceffe1 1992 python optional pypdf2_1.26.0-2+deb9u1.dsc 3959e3a15606e4b6c0405487cefb4e21 199539 python optional pypdf2_1.26.0.orig.tar.gz baf858fb43f878cf9cb64be7ddd66376 4304 python optional pypdf2_1.26.0-2+deb9u1.debian.tar.xz 0988faaedd148f972254a1a0dde189f9 7123 python optional pypdf2_1.26.0-2+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmKZ1uFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkplkQAIMlxC9WLUKK8siAxKbtyzTXfEFBIytSCo2H 5pAnhz07TRARCDjPmcjvYD6DPDAnkP6iW/cRN7oi2osmcomwdNXiqoBiq1cVkjbQ 2wotFPOyUDyA998+MJWcmaHLoOAD/g/ForeGYlIyzi1f8aIiSvp6MEjbXUQPvFsL c1mj/L7orlzBMRWu556H3JnfZocPvUnLAvEz82UADo0yKbBWKuh6r65Z13Z5H1q2 08NcSRaaKyjcgmT6MaIW4gXyFykcnkzZvZwDNoYZmKG3Wd0DaHM+eQqxaXhVLG9L xRcgIvX811NjtSvQjnR6tG1Ny8Q83dHwDJTET8xCST1g43jkzhlhqsuv8YBObeyH lfzIuNVHZXAfVQQW4aooTIrkL9r77hs4v32TRtFrADYHitJlmGRF59tt8dnndf/Z I0gTxrUQjDhgz6br/gZEkSOeTF3lBqI1NT+bbdLMWsVpdN7ZMDR4hmyAKPIMrX3P 9sbM4YkjJVK+vG9jGq2KGnpSkiMH2tYFObhQJFBN+vE8KYnAy7RdszSyICQEmvAH zcGWxQK4ngXp42Q5TYzoDI1RnxVqXcZZ7/toV228ZSVCeYZWE3PVKCrAFGGujrB1 QJ4pXCXq9YMs/YMQeUlShHDEBMruaJG3ScaZZ1lOYpicUTh4niaxBClOvtOipUr7 2a0dYG+m =8ybP -----END PGP SIGNATURE-----
