| commit | e1e7c2a4d3dd79e500103ed1d9ee29ea7237a498 | [log] [tgz] |
|---|---|---|
| author | Jacques Le Roux <jacques.le.roux@les7arts.com> | Sun Jun 13 09:16:16 2021 +0200 |
| committer | Jacques Le Roux <jacques.le.roux@les7arts.com> | Sun Jun 13 09:16:16 2021 +0200 |
| tree | c7057b64c2a90bb0a46dc9e59a2add4aa13a636f | |
| parent | f0ee9218736fa98176d1712f62178b7359ccd6ab [diff] |
Fixed: Update PDFBox to 2.0.24 because of CVE-2021-31811 & CVE-2021-31812 (OFBIZ-12256) CVE-2021-31811: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions. CVE-2021-31812: a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.