BSD PortsVulnerable: version 0.9.8nb7 is affected by 20 known vulnerabilities. See below.
print/podofo09 0.9.8nb7 NetBSD
Library to work with the PDF file format (old 0.9 branch)
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- gnu-lgpl-v2 AND gnu-gpl-v2
- Categories
- Package size
- 1088.6 KiB, 8738.6 KiB installed
Description
PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF (Portable Document Format). A few tools to work with PDF files are already included in the PoDoFo package.
The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files and modify their contents into memory. The changes can be written back to disk easily. The parser can also be used to extract information from a PDF file (for example the parser could be used in a PDF viewer). Besides parsing PoDoFo includes also very simple classes to create your own PDF files. All classes are documented so it is easy to start writing your own application using PoDoFo.
This is the old 0.9 version, just for calibre.
In the other systems
The newest version among them is 0.10.5, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | print/podofo09 | 0.9.8nb7 | 20 known | - | [email protected] | - |
| FreeBSD | graphics/podofo by name | 0.10.4_2 | none known | - | [email protected] | - |
| OpenBSD | textproc/podofo by name | 0.10.5p0 newest | no data | - | The OpenBSD ports mailing-list <[email protected]> | 2026-08-19 |
| DragonFly | graphics/podofo by name | 0.9.8_1 | none known | - | [email protected] | - |
| MidnightBSD | graphics/podofo by name | 0.10.4_2 | no data | - | [email protected] | 2026-09-07 |
| HardenedBSD | graphics/podofo by name | 0.10.4_2 | no data | - | [email protected] | - |
| GhostBSD | graphics/podofo by name | 0.10.4_2 | no data | - | [email protected] | - |
Install
Binary package:
pkgin install podofoFrom pkgsrc:
cd /usr/pkgsrc/print/podofo09 && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 0.9.8nb7 |
| NetBSD 10.1 aarch64 | 0.9.8nb7 |
| SmartOS / illumos x86_64 | 0.9.8nb7 |
| macOS 15 arm64 | 0.9.8nb7 |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 7
No port depends on this one.
Known vulnerabilities 20
- podofo: null-dereference (CVE-2017-7994)
- podofo: infinite-loop (CVE-2017-8053)
- podofo: heap-overflow (CVE-2017-8378)
- podofo: denial-of-service (CVE-2018-20797)
- podofo: infinite-loop (CVE-2018-8002)
- podofo: denial-of-service (CVE-2021-30469)
- podofo: stack-overflow (CVE-2021-30470)
- podofo: stack-overflow (CVE-2021-30471)
- podofo: stack-overflow (CVE-2021-30472)
- podofo: heap-based-buffer-overflow (CVE-2023-2241)
- podofo: denial-of-service (CVE-2023-31555)
- podofo: denial-of-service (CVE-2023-31556)
- podofo: use-after-free (CVE-2023-31566)
- podofo: heap-based-buffer-overflow (CVE-2023-31567)
- podofo: heap-based-buffer-overflow (CVE-2023-31568)
- podofo: use-after-free (CVE-2025-46205)
- podofo: use-after-free (CVE-2025-9394)
- podofo: null-dereference (CVE-2017-6842)
- podofo: heap-overflow (CVE-2017-6843)
- podofo: null-dereference (CVE-2017-6848)