Datalogics Adobe PDF Library Service Bulletin 2025-NOV-APDFL18-1
For Windows, WindowsARM, Linux, Linux ARMv8, Mac, Mac ARMv8, and AIX
Friday, January 16, 2026
Important Security Advisory!
A security vulnerability has been identified in the redaction functionality which, under certain conditions, may allow redacted content to remain extractable, potentially resulting in the unintended disclosure of sensitive information. The issue is triggered when redaction apply operations are performed using the PDDocApplyRedactions (C/C++), ApplyRedactions (.NET/.NET Framework), or applyRedactions (Java) APIs while processing documents that contain Form XObjects.
This vulnerability affects the following APDFL (.NET and Java) releases:
APDFL v18.0.5PlusP1s (18.52.0), v18.0.5PlusP1t (18.53.0), v18.0.5PlusP1u (18.54.0), v18.0.5PlusP1w (18.55.0), and v18.0.5PlusP1x (18.56.0).
A fix for this issue is included in the latest APDFL release. Although testing indicates that the vulnerability occurs only when processing documents containing Form XObjects, customers utilizing the redaction functionality are strongly advised to upgrade to APDFL v18.0.5PlusP1y (18.57.0) to ensure the secure and reliable use of the redaction feature.
If you have a suggestion or need help at any time, let us know how we can support you and improve our solutions by reaching out to tech_support@datalogics.com.
Datalogics APDFL v18.0.5PlusP1x - Now available for download!
This version introduces the following features:
• SF47337 – The following functions have been added to the C/C++ interface for enhanced QR code creation. The latest QR code enhancements expand user control by enabling customization of background and barcode colors, support for quiet zone drawing, and selection of multiple error correction levels.
• PDPageAddQRBarcodeEx(), PDDocQREncodeParamsDefault(), PDDocQREncodeParamsRelease()
• PDDocQREncodeParamsGetTextToEncode(), PDDocQREncodeParamsSetTextToEncode()
• PDDocQREncodeParamsGetPositionAndSize(), PDDocQREncodeParamsSetPositionAndSize()
• PDDocQREncodeParamsGetErrorLevel(), PDDocQREncodeParamsSetErrorLevel()
• PDDocQREncodeParamsGetQuietZoneSize(), PDDocQREncodeParamsSetQuietZoneSize()
• PDDocQREncodeParamsGetBackgroundColor(), PDDocQREncodeParamsSetBackgroundColor()
• PDDocQREncodeParamsGetCodeColor(), PDDocQREncodeParamsSetCodeColor()
A new overload of the AddQRBarcode() method has been added to the Page class of the .NET and Java interfaces.
• SF47333 – Added functions to allow PDF/A-3 with embedded files. The AFRelationship entry—introduced in PDF/A-3 and later incorporated into the PDF 2.0 standard—defines the semantic relationship between an embedded file and the PDF document (or a specific part of it). This relationship can now be programmatically set and retrieved directly via the PDF file attachment, improving standards compliance and enabling clearer metadata for associated and embedded content.
• The following functions have been added to the C/C++ interfaces.
PDFileAttachmentGetAFRelationship()
PDFileAttachmentSetAFRelationship()
• The member AFRelationship has been added to the FileAttachment class of the .NET and Java interfaces.
This version contains the following changes:
• libpng updated to version 1.6.53 for CVE-2025-66293.
• boost updated to version to 1.88.
• libcurl updated to 8.17.
• APDFL.SharedLibs NuGet package has been increased to 1.0.5.
• With this release, the Maven package version has been increased to 18.57.0.
• With this release, the NuGet package version has been increased to 18.57.0.
This version resolves the following bugs:
• SF47331 – Corrects a crash that could occur accessing the Attachments property of the Document class for a PDF with an invalid Page annotation using the .NET or Java interfaces.
• SF47332 – Saving an ImageCollection will now utilize the resolution of the first Image in the collection as the target Resolution for saving when using the .NET or Java interfaces (Support for saving multiple, different resolutions isn’t available).
• SF47336 / SF47360 – Corrects a problem recently introduced to System Font lookup where similar but inappropriate matches were being made.
• SF47339 – Rendering has been improved for Unembedded Type 0 Fonts when not available on the OS to be substituted when possible.
• SF47345 – Corrects a problem where applying a Redaction failed to work as expected in rare cases.
• SF47351 - This corrects an issue with Color Conversion of a PDF with a CMYK-based OutputIntent where the resulting values could be slightly different than expected.
• SF47355 / SF47362 – PDFOptimizer no longer resamples Stencil Mask images, previous behavior while resulting in savings yielded an inconsistent result that in some cases was a drastic loss of content.
• SF47356 - This improves a PDFOptimizer performance bottleneck for some Indexed Images.
• SF47367 – Corrects a problem with Applying Redactions that could occur in some scenarios.
• SF47371 – Improves PDFOptimizer for some Indexed images it could find ineligible for reduction
How to upgrade to the NEW version
- Connect: sftp://ftp.datalogics.com using an FTP client (port 22) or CLICK HERE to log in using your browser
- Use your private username/password that was provided during your evaluation/purchase
- Username: <<your user account number>>
- Password: <<your user password>>
- Issue a change directory to /Products/apdfl/[platform]/APDFLv18.0.5Plus/
A note about service bulletins
You are receiving this email as a customer of the Datalogics Adobe PDF Library product, and because we want you to be informed as we evolve our solution to meet your needs. This is not a marketing or promotional communication. If you have questions regarding Service Bulletins, email preferences, or need to update your contact information, please contact us at tech_support@datalogics.com.