New vulnerabilities were discovered in libtiff (bug #91584). Not sure wether this applies to our pdflib as well. CC'ing seemant as he seems to be the most active committer (any chance you could commit a metadata.xml file?).
Seemant please advise.
I asked upstream for confirmation.
Upstream will double-check it. If they are vulnerable, they may only fix it in the 6.x version...
Upstream answer: PDFlib 5.0.4 and 6.0.1 are not affected by this problem.