StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · qpdf

`qpdf` CVE matrix across Linux distros

98 CVEs tracked across 8 distro releases. Showing the 98 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2015-9252→ fixed in7.0.0-1
CVE-2017-11624→ fixed in7.0.0-1
CVE-2017-11625→ fixed in7.0.0-1
CVE-2017-11626→ fixed in7.0.0-1
CVE-2017-11627→ fixed in7.0.0-1
CVE-2017-12595→ fixed in7.0.0-1
CVE-2017-18183→ fixed in7.0.0-1
CVE-2017-18184→ fixed in7.0.0-1
+10 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y qpdf

Debian bookworm

Source: Debian

CVE-2015-9252→ fixed in7.0.0-1
CVE-2017-11624→ fixed in7.0.0-1
CVE-2017-11625→ fixed in7.0.0-1
CVE-2017-11626→ fixed in7.0.0-1
CVE-2017-11627→ fixed in7.0.0-1
CVE-2017-12595→ fixed in7.0.0-1
CVE-2017-18183→ fixed in7.0.0-1
CVE-2017-18184→ fixed in7.0.0-1
+10 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y qpdf

Debian trixie

Source: Debian

CVE-2015-9252→ fixed in7.0.0-1
CVE-2017-11624→ fixed in7.0.0-1
CVE-2017-11625→ fixed in7.0.0-1
CVE-2017-11626→ fixed in7.0.0-1
CVE-2017-11627→ fixed in7.0.0-1
CVE-2017-12595→ fixed in7.0.0-1
CVE-2017-18183→ fixed in7.0.0-1
CVE-2017-18184→ fixed in7.0.0-1
+11 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y qpdf

Alpine v3.20

Source: Alpine secdb

CVE-2017-11624→ fixed in7.0.0-r0
CVE-2017-11625→ fixed in7.0.0-r0
CVE-2017-11626→ fixed in7.0.0-r0
CVE-2017-11627→ fixed in7.0.0-r0
CVE-2017-12595→ fixed in7.0.0-r0
CVE-2017-9208→ fixed in7.0.0-r0
CVE-2017-9209→ fixed in7.0.0-r0
CVE-2017-9210→ fixed in7.0.0-r0
+1 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade qpdf

Alpine v3.21

Source: Alpine secdb

CVE-2017-11624→ fixed in7.0.0-r0
CVE-2017-11625→ fixed in7.0.0-r0
CVE-2017-11626→ fixed in7.0.0-r0
CVE-2017-11627→ fixed in7.0.0-r0
CVE-2017-12595→ fixed in7.0.0-r0
CVE-2017-9208→ fixed in7.0.0-r0
CVE-2017-9209→ fixed in7.0.0-r0
CVE-2017-9210→ fixed in7.0.0-r0
+1 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade qpdf

Alpine edge

Source: Alpine secdb

CVE-2017-11624→ fixed in7.0.0-r0
CVE-2017-11625→ fixed in7.0.0-r0
CVE-2017-11626→ fixed in7.0.0-r0
CVE-2017-11627→ fixed in7.0.0-r0
CVE-2017-12595→ fixed in7.0.0-r0
CVE-2017-9208→ fixed in7.0.0-r0
CVE-2017-9209→ fixed in7.0.0-r0
CVE-2017-9210→ fixed in7.0.0-r0
+1 more in Alpine edge

Single command to patch all of these:

apk add --upgrade qpdf

Alpine v3.18

Source: Alpine secdb

CVE-2017-11624→ fixed in7.0.0-r0
CVE-2017-11625→ fixed in7.0.0-r0
CVE-2017-11626→ fixed in7.0.0-r0
CVE-2017-11627→ fixed in7.0.0-r0
CVE-2017-12595→ fixed in7.0.0-r0
CVE-2017-9208→ fixed in7.0.0-r0
CVE-2017-9209→ fixed in7.0.0-r0
CVE-2017-9210→ fixed in7.0.0-r0

Single command to patch all of these:

apk add --upgrade qpdf

Alpine v3.19

Source: Alpine secdb

CVE-2017-11624→ fixed in7.0.0-r0
CVE-2017-11625→ fixed in7.0.0-r0
CVE-2017-11626→ fixed in7.0.0-r0
CVE-2017-11627→ fixed in7.0.0-r0
CVE-2017-12595→ fixed in7.0.0-r0
CVE-2017-9208→ fixed in7.0.0-r0
CVE-2017-9209→ fixed in7.0.0-r0
CVE-2017-9210→ fixed in7.0.0-r0

Single command to patch all of these:

apk add --upgrade qpdf

Is YOUR qpdf patched?

5-second check on your actual server. The quickscan reads your installed qpdf version and matches against the same 98-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)