SUSE-SU-2026:22088-1 Security update for apache-pdfbox

This update for apache-pdfbox fixes the following issues: Update to version 2.0.36. Security issues fixed: - CVE-2026-33929: path traversal in the ExtractEmbeddedFiles example code can lead to arbitrary file writes bsc1262046. Other updates and bugfixes: - Version 2.0.36: - XMPBox removes...

DEBIAN-CVE-2026-33929

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. Users are recommended to update to version 2.0.37 or...

CVE-2026-33929

creationtimestamp| type| source ---|---|--- 2026-04-14 03:05:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjgfjzksuw2e 2026-04-14 11:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhcybmuaf2a...