CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/pdfrip 3.0.0_6

Multi-threaded PDF password cracking utility in Rust

Maintainer
fox@FreeBSD.org
Packages
latest: 3.0.0_6
Upstream
up to date
Last update
to 3.0.0_6 · 9c878207a1
Quarterly
2026Q4: 3.0.0_5
WWW
https://github.com/mufeedvh/pdfrip
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.0.0_6.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (14)

Mikael Urankar (mikael) · 3.0.0_6
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Mikael Urankar (mikael) · 3.0.0_5
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Mikael Urankar (mikael) · 3.0.0_4
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Mikael Urankar (mikael) · 3.0.0_3
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Mikael Urankar (mikael) · 3.0.0_2
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 3.0.0_1
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Santhosh Raju (fox) · 3.0.0
security/pdfrip: Update to 3.0.0

Changes since 2.0.1:

PDFRip v3.0.0 is a trust/performance/compatibility release focused on
making
pdfrip more correct, measurable, and useful on real password-cracking
workloads.

Highlights

Prepared verifier hot path

  * Password attempts no longer rebuild general PDF parsing/storage
    state on
    every try
  * The release extracts the security envelope once, prepares a direct
    verifier
    once, and reuses it across attempts
  * Verified against deterministic qpdf fixtures for Standard Security
    Handler
    revisions R2 through R6

Better compatibility coverage

The fixture and verifier matrix now covers:
  * R2 / R3 / R4 RC4
  * R4 AES-128
  * R5 / R6 AES-256
  * Unicode R5 / R6 passwords
  * Blank user passwords
  * Object streams and xref streams
  * Linearized PDFs
  * EncryptMetadata=false

Exact progress and resume

  * Progress is now based on verified attempts, not merely queued work
  * Historical "100%, ETA 0s, but still running" behavior is fixed
  * Checkpoint/resume is now a first-class workflow with exact
    verified-prefix
    recovery

New and improved search workflows

  * New mask mode for bounded structured passwords
  * New contains-word mode for "known substring + brute-force the rest"
    workflows
  * Date --format now supports custom shapes
  * Custom-query now supports literal-only queries and fixes bugs
  * Numeric ranges are inclusive and sized exactly
  * Default-query now enumerates printable ASCII correctly and can test
    blank
    passwords

Better UX and reporting

  * Success output distinguishes user vs owner passwords when revision
    allows
    it
  * Blank passwords render explicitly as ""
  * Structured JSON output available with --json
  * Malformed inputs return normal user-facing errors instead of panics
  * Documentation matches measured reality and current workflows

New opt-in fast mode

  * --user-password-only skips owner-password checks for
    document-opening
    password workflows
  * Can reduce end-to-end time on R5/R6 workloads

Measured improvements

  Representative local measurements on Apple M3 Pro showed:
  * Synthetic R5 prepared verifier: 15.5x lower latency than legacy path
  * Large bundled R3 example: 4.5x lower latency
  * 10,000-candidate mask exhaustion: 3.4x faster at 4 workers vs 1
    worker
  * User-password-only speedups: 1.31x-2.77x faster depending on
    revision

Build and release hardening

  * Exact dependency pinning for sensitive direct crates
  * Tracked Cargo.lock with --locked CI/release flows
  * CI coverage on Linux/macOS/Windows for stable + nightly
  * Cargo install smoke testing
  * Benchmark-harness build coverage
  * PDF fixtures marked binary-safe across platforms
00f9ff2815
Mikael Urankar (mikael) · 2.0.1_5
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Mathieu Arnold (mat) · 2.0.1_4
crates: cleanup
0730582096
Mikael Urankar (mikael) · 2.0.1_4
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 2.0.1_3
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Mikael Urankar (mikael) · 2.0.1_2
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Mikael Urankar (mikael) · 2.0.1_1
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Santhosh Raju (fox) · 2.0.1
security/pdfrip: New port: Multi-threaded PDF password cracking utility in Rust

A multi-threaded PDF password cracking utility equipped with
commonly encountered password format builders and dictionary
attacks.

WWW: https://github.com/mufeedvh/pdfrip
9f33965741