High DSA-3606-1 1 CVE

libpdfbox-java - security update

Published Jun 24, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libpdfbox-java	1:1.8.7+dfsg-1+deb8u1

Vulnerabilities 1

High 7.8

CVE-2016-2175

High severity vulnerability that affects org.apache.pdfbox:pdfbox

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.

libpdfbox-java org.apache.pdfbox:pdfbox libpdfbox-java Debian Ubuntu Maven

Jun 1, 2016