python311-ocrmypdf-17.4.2-1.1 on GA media (moderate)

python311-ocrmypdf-17.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10855-1 Rating: moderate Cross-References: CVE-2023-43115 CVSS scores: CVE-2023-43115 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

OPENSUSE-SU-2026:10855-1 python311-ocrmypdf-17.4.2-1.1 on GA media

These are all security issues fixed in the python311-ocrmypdf-17.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

ocrmypdf (>=9.0.5, <=9.1.0), reviewboardpowerpack (>=3.0.4, <=5.3.0) potentially affected by CVE-2025-70559 via pdfminer-six (20191020.0.0)

pdfminer-six PYPI version 20191020.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.0.5, =3.0.4, =5.3.0 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-70559 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-70559 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-70559 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-70559 Source advisory:...

edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (13.4.4) potentially affected by CVE-2025-70559 via pdfminer-six (20220506.0.0)

pdfminer-six PYPI version 20220506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 13.4.4 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (13.4.4) potentially affected by CVE-2025-64512 via pdfminer-six (20220506.0.0)

pdfminer-six PYPI version 20220506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 13.4.4 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

ocrmypdf (>=9.0.5, <=9.1.0), reviewboardpowerpack (>=3.0.4, <=5.3.0) potentially affected by CVE-2025-64512 via pdfminer-six (20191020.0.0)

pdfminer-six PYPI version 20191020.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.0.5, =3.0.4, =5.3.0 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200726.0.0)

pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-64512 Source advisory:...

edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-64512 Source advisory:...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-64512 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

ocrmypdf (>=8.0.0, <=11.3.0), sec-certs (>=0.0.0, <=0.0.1) potentially affected by CVE-2021-29421 via pikepdf (>=1.19.4, <=2.0.0)

pikepdf PYPI version =1.19.4, =8.0.0, =0.0.0, =0.0.1 Source cves: CVE-2021-29421 Source advisory: OSV:GHSA-CCGM-3XW4-H5P8...

ocrmypdf (>=8.0.0, <=11.3.0), sec-certs (>=0.0.0, <=0.0.1) potentially affected by CVE-2021-29421 via pikepdf (>=1.19.4, <=2.0.0)

pikepdf PYPI version =1.19.4, =8.0.0, =0.0.0, =0.0.1 Source cves: CVE-2021-29421 Source advisory: GHSA-CCGM-3XW4-H5P8...

ocrmypdf (>=8.0.0, <=11.3.0), sec-certs (>=0.0.0, <=0.0.1) potentially affected by CVE-2021-29421 via pikepdf (>=1.19.4, <=2.0.0)

pikepdf PYPI version =1.19.4, =8.0.0, =0.0.0, =0.0.1 Source cves: CVE-2021-29421 Source advisory: OSV:PYSEC-2021-34...

ocrmypdf (>=8.0.0, <=11.3.0), sec-certs (>=0.0.0, <=0.0.1) potentially affected by CVE-2021-29421 via pikepdf (>=1.19.4, <=2.0.0)

pikepdf PYPI version =1.19.4, =8.0.0, =0.0.0, =0.0.1 Source cves: CVE-2021-29421 Source advisory: MEND:CVE-2021-29421...