PoDoFo: Multiple Vulnerabilities — GLSA 202405-33

Multiple vulnerabilities have been discovered in PoDoFo, the worst of which could lead to code execution.

Package	app-text/podofo on all architectures
Affected versions	< 0.10.1
Unaffected versions	>= 0.10.1

PoDoFo is a free portable C++ library to work with the PDF file format.

Please review the referenced CVE identifiers for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All PoDoFo users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-text/podofo-0.10.1"

Release date
May 12, 2024

Latest revision
May 12, 2024: 1

Severity
high

Exploitable
remote

Bugzilla entries