libpdfbox-java - Debian Package Tracker

general

source: libpdfbox-java (main)
version: 1:1.8.16-5
maintainer: Debian Java Maintainers (archive) (DMD)
uploaders: tony mancill [DMD] – Emmanuel Bourg [DMD]
arch: all
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:1.8.16-2
oldstable: 1:1.8.16-2
stable: 1:1.8.16-5
testing: 1:1.8.16-5
unstable: 1:1.8.16-5

versioned links

1:1.8.16-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:1.8.16-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libfontbox-java
libjempbox-java
libpdfbox-java (1 bugs: 0, 1, 0, 0)

action needed

A new upstream version is available: 3.0.8 high

A new upstream version 3.0.8 is available, you should consider packaging it.

Created: 2025-12-08 Last update: 2026-09-26 10:30

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: bad revision 'f3453e379a104f2ad6f82d4cc2fbf5395de6d8b0' error: https://salsa.debian.org/java-team/libpdfbox-java.git did not send all necessary objects fatal: could not fetch f3453e379a104f2ad6f82d4cc2fbf5395de6d8b0 from promisor remote fatal: fetch-pack: invalid index-pack output

Created: 2026-09-26 Last update: 2026-09-26 09:32

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2021-31811: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-31812: In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Created: 2022-07-04 Last update: 2026-09-01 22:00

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2021-31811: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-31812: In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Created: 2025-08-09 Last update: 2026-09-01 22:00

Multiarch hinter reports 2 issue(s) normal

There are issues with the multiarch metadata for this package.

libfontbox-java could be marked Multi-Arch: foreign
libjempbox-java could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2026-09-26 11:01

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2023-12-15 Last update: 2025-09-11 00:03

No known security issue in trixie wishlist

There are 2 open security issues in trixie.

2 ignored issues:

CVE-2021-31811: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-31812: In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Created: 2025-08-09 Last update: 2026-09-01 22:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.2).

Created: 2024-04-07 Last update: 2026-03-31 15:01

news

[rss feed]

[2026-09-26] Accepted libpdfbox-java 1:1.8.17-1 (source) into unstable (Emmanuel Bourg)
[2023-12-21] libpdfbox-java 1:1.8.16-5 MIGRATED to testing (Debian testing watch)
[2023-12-15] Accepted libpdfbox-java 1:1.8.16-5 (source) into unstable (tony mancill)
[2023-07-24] libpdfbox-java 1:1.8.16-4 MIGRATED to testing (Debian testing watch)
[2023-07-19] Accepted libpdfbox-java 1:1.8.16-4 (source) into unstable (tony mancill)
[2023-07-16] libpdfbox-java 1:1.8.16-3 MIGRATED to testing (Debian testing watch)
[2023-07-11] Accepted libpdfbox-java 1:1.8.16-3 (source) into unstable (tony mancill)
[2019-03-02] libpdfbox-java 1:1.8.16-2 MIGRATED to testing (Debian testing watch)
[2019-02-19] Accepted libpdfbox-java 1:1.8.16-2 (source) into unstable (gregor herrmann)
[2018-10-16] Accepted libpdfbox-java 1:1.8.7+dfsg-1+deb8u2 (source all) into oldstable (Chris Lamb)
[2018-10-12] libpdfbox-java 1:1.8.16-1 MIGRATED to testing (Debian testing watch)
[2018-10-06] Accepted libpdfbox-java 1:1.8.16-1 (source) into unstable (Markus Koschany)
[2018-07-06] libpdfbox-java 1:1.8.15-1 MIGRATED to testing (Debian testing watch)
[2018-06-30] Accepted libpdfbox-java 1:1.8.15-1 (source) into unstable (Markus Koschany)
[2018-01-27] libpdfbox-java 1:1.8.13-2 MIGRATED to testing (Debian testing watch)
[2018-01-22] Accepted libpdfbox-java 1:1.8.13-2 (source all) into unstable (tony mancill)
[2017-08-01] libpdfbox-java 1:1.8.13-1 MIGRATED to testing (Debian testing watch)
[2017-07-26] Accepted libpdfbox-java 1:1.8.13-1 (source) into unstable (Markus Koschany)
[2016-06-28] Accepted libpdfbox-java 1:1.8.7+dfsg-1+deb8u1 (source all) into proposed-updates->stable-new, proposed-updates (Emmanuel Bourg)
[2016-06-08] Accepted libpdfbox-java 1:1.7.0+dfsg-4+deb7u1 (source all) into oldstable (signed by: Markus Koschany)
[2016-06-07] libpdfbox-java 1:1.8.12-1 MIGRATED to testing (Debian testing watch)
[2016-06-01] Accepted libpdfbox-java 1:1.8.12-1 (source all) into unstable (Emmanuel Bourg)
[2016-01-29] libpdfbox-java 1:1.8.11+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-01-23] Accepted libpdfbox-java 1:1.8.11+dfsg-1 (source) into unstable (gregor herrmann)
[2015-12-13] libpdfbox-java 1:1.8.10-2 MIGRATED to testing (Debian testing watch)
[2015-12-08] Accepted libpdfbox-java 1:1.8.10-2 (source all) into unstable (tony mancill)
[2015-11-24] libpdfbox-java 1:1.8.10-1 MIGRATED to testing (Britney)
[2015-11-18] Accepted libpdfbox-java 1:1.8.10-1 (source all) into unstable (Emmanuel Bourg)
[2014-09-25] libpdfbox-java 1:1.8.7+dfsg-1 MIGRATED to testing (Britney)
[2014-09-19] Accepted libpdfbox-java 1:1.8.7+dfsg-1 (source all) into unstable (gregor herrmann)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:1.8.16-5