A security notice published on September 28, 2026 says specially crafted PDFs may exploit pdfminer flaws and possibly allow arbitrary code execution.
Notice USN-8837-1, published on September 28, 2026, says pdfminer did not safely analyze specially crafted PDF files. According to the notice, an attacker could possibly exploit the flaws to execute arbitrary code. It associates the issues with identifiers CVE-2025-64512 and CVE-2025-70559.
To check the scope, affected packages, and any fixes, consult the original Ubuntu security notice by searching for USN-8837-1, and check the cited CVE entries as well. The automated translation in the feed does not give affected versions or update instructions; confirm these details in the official publication before taking action. If you use AI to study or apply the notice, do not submit suspicious PDFs or internal data without authorization, and follow your organization's data-protection policy.