Bug#986006: libpdfbox2-java: CVE-2021-27807

[Moritz Mühlenhoff]

Am Mon, Apr 05, 2021 at 09:37:41AM -0700 schrieb tony mancill:
> On Sat, Mar 27, 2021 at 07:52:37PM +0100, Salvatore Bonaccorso wrote:
> > Source: libpdfbox2-java
> > Version: 2.0.22-1
> > Severity: important
> > Tags: security upstream
> > X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
> 
> Hi Salvatore,
> 
> I'm continuing our thread from 986008, but switching over the BTS entry
> 986006 for CVE-2021-27807 to try to cut down on confusion between the CVEs.
> Below is why I marked this bug as fixed in 2.0.23-1.  I haven't yet
> identified the exact commit(s), but will update bug if I can locate it.

Hi,
this is also unfixed in bullseye, can you please file an unblock request?

Cheers,
        Moritz