iText 5.5.13.5

Since the release of iText 5.5.13 the iText 5 product line has transitioned to be in maintenance mode, meaning it only receives security related releases. While iText 5 is now EOL, we want to make sure that our users who have developed their solutions using iText 5 can safely continue using it.

For this particular release, the Bouncy Castle cryptography libraries have been updated to their latest versions (Java to 1.83, .NET to 2.6.2) to address security vulnerabilities:

• Java (BC Java 1.83): This version includes important security patches, such as the fix for CVE-2025-8916 (Allocation of Resources Without Limits or Throttling vulnerability)
• .NET (BC C# 2.6.2): This version incorporates security fixes from previous releases. To review the detailed security history and related CVE information for the .NET library, you can check its NuGet page: BouncyCastle.Cryptography

iText 5.5.13.4

Security update of Bouncy Castle dependency to fix CVE-2024-29857.

While in the past we would ask our users to update this transitive dependency themselves, there has been a slight change in the Bouncy Castle API which warranted this release.

iText 5.5.13.3

Since the release of iText 5.5.13 the iText 5 product line has transitioned to be in maintenance mode, meaning it only receives security related releases. While iText 5 is now EOL, we want to make sure that our users who have developed their solutions using iText 5 can safely continue using it.

For this particular release, we’ve backported a security bug fix from iText 7.2.0 and 7.1.17 to resolve a vulnerability that allowed the use of GhostScript in an unpredictable manner. See CVE-2021-43113 for more information.

In addition, we have updated the Apache XML Security for Java (org.apache.santuario:xmlsec) dependency to version 1.5.8 from version 1.5.6.

We have also updated the C# Bouncy Castle dependency to 1.8.9 due to a Timing Attack vulnerability present in version 1.8.6.1. For more information, see https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLE-1296078

iText 5.5.13.2

core

• security update of bouncy castle dependency

iText 5.5.13.1

core

• security fix for clearer signatures validation
• security improvement around decompression bombs

iText 5.5.13

iText 5.5.13 is a maintenance release that rolls up 4 bugfixes for iText 5 Core from the past 5 months:

• As of this release XFA Worker is no longer supported on .NET 2.0 - instead you need to use .NET 4.0.
• Support has been added for License Key Library 3.0.1. Users on License Key Library 1.0.x should migrate to 3.0.1.
• 3 bugfixes for iText 5 Core 5.5.13.
• 1 bugfix for XFA Worker 5.5.13 (commercial add-on, not on GitHub).
  Please be informed that at the same time we release pdfXFA 1.0.3, an add-on for iText 7. All bugfixes for XFA Worker 5.5.13 were ported to pdfXFA 1.0.3.

No new functionality has been added since 5.5.11.

The full list of changes can be found in the changelogs and the release in our download hub for Java and .NET.

iText 5.5.13 for .NET (also known as iTextSharp) can be installed using NuGet: https://www.nuget.org/packages/iTextSharp/5.5.13

Package Manager:

Install-Package iTextSharp
Install-Package itextsharp.pdfa
Install-Package itextsharp.xtra
Install-Package itextsharp.xmlworker
Install-Package itextsharp.xfaworker

.NET CLI:

dotnet add package iTextSharp
dotnet add package itextsharp.pdfa
dotnet add package itextsharp.xtra
dotnet add package itextsharp.xmlworker
dotnet add package itextsharp.xfaworker

Still questions about the release, don't hesitate to contact us.

iText 5.5.12

iText 5.5.12 is a maintenance release that rolls up 22 bugfixes for iText 5 Core from the past 5 months:

• 22 bugfixes for iText 5 Core 5.5.12.
• 6 bugfixes for XFAWorker 5.5.12 (Commercial add-on, not on GitHub).

No new functionality has been added since 5.5.11.

At the same time we also release pdfXFA 1.0.2, an add-on for iText 7. All bugfixes for XFAWorker 5.5.12 were ported to pdfXFA 1.0.2.

iText 5.5.12 for .NET (also known as iTextSharp) can be installed using NuGet.

Package Manager:

Install-Package iTextSharp -Version 5.5.12
Install-Package itextsharp.pdfa -Version 5.5.12
Install-Package itextsharp.xtra -Version 5.5.12
Install-Package itextsharp.xmlworker -Version 5.5.12
Install-Package itextsharp.xfaworker -Version 5.5.12

.NET CLI:

dotnet add package iTextSharp --version 5.5.12
dotnet add package itextsharp.pdfa --version 5.5.12
dotnet add package itextsharp.xtra --version 5.5.12
dotnet add package itextsharp.xmlworker --version 5.5.12
dotnet add package itextsharp.xfaworker --version 5.5.12

iTextSharp 5.5.11

iText 5.5.11 is a maintenance release that rolls up 28 bugfixes from the past 5 months. No new functionality has been added since 5.5.10.

iTextSharp 5.5.10

Changelog: http://itextpdf.com/changelog/5510
Release Notes: http://itextpdf.com/release/iText5510
Download: https://github.com/itext/itextsharp/releases/tag/5.5.10

Please note: the XMLWorker dll is now included in the itextsharp-all zip.

iTextSharp 5.5.9

Changelog: http://itextpdf.com/changelog/559
Release Notes: http://itextpdf.com/release/iText559
Download: https://github.com/itext/itextsharp/releases/tag/5.5.9