StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · xpdf

`xpdf` CVE matrix across Linux distros

256 CVEs tracked across 8 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2002-1384→ fixed in2.01-2
CVE-2003-0434→ fixed in2.02pl1-1
CVE-2004-0888→ fixed in3.00-9
CVE-2004-0889→ fixed in3.00-10
CVE-2004-1125→ fixed in3.00-11
CVE-2005-0064→ fixed in3.00-13
CVE-2005-2097→ fixed in3.00-15
CVE-2005-3191→ fixed in3.01-3
+42 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xpdf

Debian bookworm

Source: Debian

CVE-2002-1384→ fixed in2.01-2
CVE-2003-0434→ fixed in2.02pl1-1
CVE-2004-0888→ fixed in3.00-9
CVE-2004-0889→ fixed in3.00-10
CVE-2004-1125→ fixed in3.00-11
CVE-2005-0064→ fixed in3.00-13
CVE-2005-2097→ fixed in3.00-15
CVE-2005-3191→ fixed in3.01-3
+42 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xpdf

Debian trixie

Source: Debian

CVE-2002-1384→ fixed in2.01-2
CVE-2003-0434→ fixed in2.02pl1-1
CVE-2004-0888→ fixed in3.00-9
CVE-2004-0889→ fixed in3.00-10
CVE-2004-1125→ fixed in3.00-11
CVE-2005-0064→ fixed in3.00-13
CVE-2005-2097→ fixed in3.00-15
CVE-2005-3191→ fixed in3.01-3
+42 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xpdf

Alpine v3.20

Source: Alpine secdb

CVE-2020-25725→ fixed in4.03-r0
CVE-2020-35376→ fixed in4.03-r0
CVE-2022-24106→ fixed in4.04-r0
CVE-2022-24107→ fixed in4.04-r0
CVE-2022-30524→ fixed in4.05-r0
CVE-2022-30775→ fixed in4.05-r0
CVE-2022-33108→ fixed in4.05-r0
CVE-2022-36561→ fixed in4.05-r0
+4 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade xpdf

Alpine v3.21

Source: Alpine secdb

CVE-2020-25725→ fixed in4.03-r0
CVE-2020-35376→ fixed in4.03-r0
CVE-2022-24106→ fixed in4.04-r0
CVE-2022-24107→ fixed in4.04-r0
CVE-2022-30524→ fixed in4.05-r0
CVE-2022-30775→ fixed in4.05-r0
CVE-2022-33108→ fixed in4.05-r0
CVE-2022-36561→ fixed in4.05-r0
+4 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade xpdf

Alpine edge

Source: Alpine secdb

CVE-2020-25725→ fixed in4.03-r0
CVE-2020-35376→ fixed in4.03-r0
CVE-2022-24106→ fixed in4.04-r0
CVE-2022-24107→ fixed in4.04-r0
CVE-2022-30524→ fixed in4.05-r0
CVE-2022-30775→ fixed in4.05-r0
CVE-2022-33108→ fixed in4.05-r0
CVE-2022-36561→ fixed in4.05-r0
+4 more in Alpine edge

Single command to patch all of these:

apk add --upgrade xpdf

Alpine v3.18

Source: Alpine secdb

CVE-2020-25725→ fixed in4.03-r0
CVE-2020-35376→ fixed in4.03-r0

Single command to patch all of these:

apk add --upgrade xpdf

Alpine v3.19

Source: Alpine secdb

CVE-2020-25725→ fixed in4.03-r0
CVE-2020-35376→ fixed in4.03-r0
CVE-2022-24106→ fixed in4.04-r0
CVE-2022-24107→ fixed in4.04-r0
CVE-2022-30524→ fixed in4.05-r0
CVE-2022-30775→ fixed in4.05-r0
CVE-2022-33108→ fixed in4.05-r0
CVE-2022-36561→ fixed in4.05-r0
+4 more in Alpine v3.19

Single command to patch all of these:

apk add --upgrade xpdf

Is YOUR xpdf patched?

5-second check on your actual server. The quickscan reads your installed xpdf version and matches against the same 256-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)