Am 20.04.26 um 16:44 schrieb arun m:
Hi Team,

I see a commit to fix the CVE-2026-33929 cve in 3.0 and 2.0 branches


When can we expect the release of 2.0.37 with this fix.

Our product deliverables are impacted with this CVE, is there an ETA for
this?
To avoid wrong expectations, future versions of PDFBox, starting with 2.0.37/3.0.8, won't provide the pre-compiled pdfbox-eaxamples.jar anymore.

Simply stop using the examples.jar.

Use the code from the examples subproject to build your own hopefully bullet-proof application.

Andreas


Regards
Arun M



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to