Release iText 5.5.13.1

iText 5.5.13.1 is a security release that adds 1 security fix and 1 security improvement.

20th June 2019
iText PDF

Blog_iText 5.5.13.1 header_1140x300_1.png

iText 5.5.13.1 is a maintenance release for iText 5. Although iText 5 is now EOL and will not be receiving any new features, we have released this update for our iText 5 users to incorporate improvements in the digital signing system for checking and verifying signatures with iText.

This is intended to address the security vulnerabilities in digital signatures published earlier this year by researchers from the Ruhr-University Bochum in Germany. To read more about the vulnerabilities and how to avoid them with iText, see the following blog post: https://itextpdf.com/en/blog/technical-notes/avoiding-pdf-digital-signature-vulnerabilities-itext.

Please ensure you update to this maintenance release, or consider upgrading to iText 7 for more comprehensive digital signature security and more features.

Additionally, we've also addressed a separate vulnerability using decompression bombs as an attack vector.

Release notes

iText 5.5.13.1 Core for Java and for .NET

  • 1 security fix for clearer signatures validation, and 1 security improvement around decompression bombs have been added to iText 5 Core

Bug

[DEV-1964] iText incorrectly validates signatures for doctored PDF files.

Improvement

[DEV-1989] Avoid resources depletion due to decompression bombs



Compatibility Matrix

Use our easy compatibility matrix tool to find more information about the compatibility between your current iText Core/Community version and our add-ons and 3rd-party standalone applications

Add-ons 7.1.6

iText 7 Core

7.1.6

iText 7 Community

7.1.6

pdf2Data

2.1.1

pdfHTML

2.1.3

More add-ons 7.1.6

pdfDebug

2.0.1

pdfSweep

2.0.4

pdfXFA

2.0.1

pdfCalligraph

2.0.4

Contact

Still have questions? 

We're happy to answer your questions. Reach out to us and we'll get back to you shortly.

Contact us
Stay updated

Join 11,000+ subscribers and become an iText PDF expert by staying up to date with our new products, updates, tips, technical solutions and happenings.

Subscribe Now