tocsin

Alpine/qpdf: high 7.8

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have

Action: Upgrade qpdf to 7.0.0-r0 or later.

Affected

introducedfixedlast affected
07.0.0-r0-

Fixed versions

7.0.0-r0

Sources

published · modified · JSON