Critical DSA-5323-1 1 CVE

libitext5-java - security update

Published Jan 19, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libitext5-java	5.5.13.2-1+deb11u1

Vulnerabilities 1

Critical 9.8

CVE-2021-43113

Command injection in itext7-core

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

com.itextpdf:itext7-core libitext5-java libitext5-java com.itextpdf:itextpdf Debian Ubuntu Maven

Dec 15, 2021