Home / mailings [USN-8837-1] pdfminer vulnerabilities
Posted on 29 September 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-8837-1
September 28, 2026
pdfminer vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
pdfminer could be made to run programs as your login if it opened a
specially crafted file.
Software Description:
- pdfminer: PDF parser and analyser
Details:
It was discovered that pdfminer did not safely parse specially crafted
PDF files. An attacker could possibly use these issues to execute
arbitrary code. (CVE-2025-64512, CVE-2025-70559)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
python3-pdfminer 20221105+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 22.04 LTS
python3-pdfminer 20220319+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 20.04 LTS
python3-pdfminer 20191020+dfsg-2ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
python-pdfminer 20140328+dfsg-1ubuntu0.18.04.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04 LTS
python-pdfminer 20140328+dfsg-1ubuntu0.16.04.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8837-1
CVE-2025-64512, CVE-2025-70559
--===============1739350426897802505==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
