diff --git a/build.gradle b/build.gradle
index 2c086de807..0bd8bf1e1a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -129,7 +129,7 @@ subprojects {
         xmlbeansVersion = '5.1.1'
         batikVersion = '1.16'
         graphics2dVersion = '0.43'
-        pdfboxVersion = '2.0.28'
+        pdfboxVersion = '2.0.29'
         saxonVersion = '11.5'
         apiGuardianVersion = '1.1.2'
 
diff --git a/build.xml b/build.xml
index 55a97e86f3..a07484463d 100644
--- a/build.xml
+++ b/build.xml
@@ -325,8 +325,8 @@ under the License.
     <dependency prefix="svg.batik-transcoder" artifact="org.apache.xmlgraphics:batik-transcoder:1.16" usage="ooxml-batik"/>
     <dependency prefix="svg.batik-util" artifact="org.apache.xmlgraphics:batik-util:1.16" usage="ooxml-batik"/>
     <dependency prefix="svg.batik-xml" artifact="org.apache.xmlgraphics:batik-xml:1.16" usage="ooxml-batik"/>
-    <dependency prefix="pdf.pdfbox" artifact="org.apache.pdfbox:pdfbox:2.0.28" usage="ooxml-provided"/>
-    <dependency prefix="pdf.fontbox" artifact="org.apache.pdfbox:fontbox:2.0.28" usage="ooxml-provided"/>
+    <dependency prefix="pdf.pdfbox" artifact="org.apache.pdfbox:pdfbox:2.0.29" usage="ooxml-provided"/>
+    <dependency prefix="pdf.fontbox" artifact="org.apache.pdfbox:fontbox:2.0.29" usage="ooxml-provided"/>
     <dependency prefix="pdf.graphics2d" artifact="de.rototor.pdfbox:graphics2d:0.43" usage="ooxml-provided"/>
 
     <!-- jars in the ooxml-lib directory, see the fetch-ooxml-jars target-->