tocsin

Debian/qpdf: medium 5.5

libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf

Action: Upgrade qpdf to 7.0.0-1 or later.

Affected

introducedfixedlast affected
07.0.0-1-

Fixed versions

7.0.0-1

Sources

published · modified · JSON