Fedora alert FEDORA-2025-63872f52bb (python-pdfminer)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: python-pdfminer-20251107-1.fc43 | |
| Date: | Mon, 17 Nov 2025 02:47:01 +0000 | |
| Message-ID: | <20251117024701.6840379374@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-63872f52bb 2025-11-17 02:43:35.105930+00:00 -------------------------------------------------------------------------------- Name : python-pdfminer Product : Fedora 43 Version : 20251107 Release : 1.fc43 URL : https://github.com/pdfminer/pdfminer.six Summary : Tool for extracting information from PDF documents Description : Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact location, font or color of the text. It is built in a modular way such that each component of pdfminer.six can be replaced easily. You can implement your own interpreter or rendering device that uses the power of pdfminer.six for other purposes than text analysis. Check out the full documentation on Read the Docs (https://pdfminersix.readthedocs.io/). Features: • Written entirely in Python. • Parse, analyze, and convert PDF documents. • PDF-1.7 specification support. (well, almost). • CJK languages and vertical writing scripts support. • Various font types (Type1, TrueType, Type3, and CID) support. • Support for extracting images (JPG, JBIG2, Bitmaps). • Support for various compressions (ASCIIHexDecode, ASCII85Decode, LZWDecode, FlateDecode, RunLengthDecode, CCITTFaxDecode) • Support for RC4 and AES encryption. • Support for AcroForm interactive form extraction. • Table of contents extraction. • Tagged contents extraction. • Automatic layout analysis. -------------------------------------------------------------------------------- Update Information: Update to 20251107 Fix: arbitary code execution when loading pickle font files Security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 7 2025 Benjamin A. Beasley <code@musicinmybrain.net> - 20251107-1 - Update to 20251107 (fixes RHBZ#2413443) - Security fix for GHSA-wf5f-4jwr-ppcp -------------------------------------------------------------------------------- References: [ 1 ] Bug #2413443 - python-pdfminer-20251107 is available https://bugzilla.redhat.com/show_bug.cgi?id=2413443 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-63872f52bb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
Attachment: None (type=text/plain)
-- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue