| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libpodofo2 | Distribution: openSUSE Tumbleweed |
| Version: 0.10.3 | Vendor: openSUSE |
| Release: 2.1 | Build date: Sat Dec 30 12:33:37 2023 |
| Group: System/Libraries | Build host: reproducible |
| Size: 2644951 | Source RPM: podofo-0.10.3-2.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: http://podofo.sourceforge.net/ | |
| Summary: PDF parsing and creation library | |
A cross platform PDF parsing and creation library.
LGPL-2.1-or-later
* Sat Dec 30 2023 Dirk Müller <dmueller@suse.com>
- update to 0.10.3:
* Fixed big performance regression introduced in 0.10, see #108
* Fixed data loss with encrypted documents, see #99
* Fixed compilation with VS2022 >= 17.8
* Fixed compilation using libxml >= 2.12.0
* Sun Dec 03 2023 Wang Jun <badboywj@gmail.com>
- Update to 0.10.2
* Security related bugfixes #76, #89, #96
* Some compilation and test fixes
* Drop podofo_security-fixes-validate-more-encrypt-dictionary-parameters.patch,
Drop podofo_security-fixes-handling-of-invalid-XRef-stream-entries.patch,
All these fixes have been merged by upstream.
(bsc#1213720)
* Fri Jun 30 2023 ecsos <ecsos@opensuse.org>
- Update to 0.10.1
- Security bugfixes, #66, #67, #69, #70, #71, #72
- Rewritten PdfPageCollection for performance
- PdfCMapEncoding: Fix parsing some invalid CMap(s) supported by Acrobat
- PdfXRefStreamParserObject: Fixed handling of invalid XRef stream entries
- Support compilation of the library header (not the library itself) with C++20
- Changes from 0.10.0
The release is complete re-imagination of PoDoFo 0.9.x API in C++17,
and it's API/ABI incompatible with the previous releases.
- PdfPage/PdfAnnotationCollection/PdfAnnotation: Now functions with rect input assume it
to be using the canonical coordinate system with no rotation
- PdfImage: Added support for CYMK jpeg
- PdfParser: Cleaned FindToken2 -> FindTokenBackward
- Renamed base source folder -> main
- PdfPainter: Revamped API, added full state inspection with current point,
added added PdfPainterTextContext to handle text object operations
Use it with PdfPainter::Text instance member. Added PdfContentStreamOperators
low level interface for PdfPainter moved SmoothCurveTo, QuadCurveTo SmoothQuadCurveTo,
ArcTo, Arc, to an helper structure until cleaned
- PdfFontMetrics: Added FilePath/FaceIndex for debugging, when available
- PdfFont: Renamed GetStringLength() overloads with PdfString to GetEncodedStringLength()
- PdfFontManager: Renamed GetFont() -> SearchFont() Re-Added better GetOrCreateFont() from file/buffer
- PdfEncrypt: Cleaned factory methods
- Added PdfArray::FindAtAs(), PdfArray::FindAtAsSafe(), PdfArray::TryFindAtAs(),
PdfArray::GetAtAs(), PdfArray::GetAtAsSafe(), PdfArray::TryGetAtAs()
- Added PdfDictionary::FindKeyAsSafe() and PdfDictionary::TryFindKeyAs()
- PdfDictionary::AddKeyIndirect/PdfArray::AddKeyIndirect accepts a reference
- PdfAnnotation/PdfField API review
- PdfDate: Introduced PdfDate::LocalNow() and PdfDate::UtcNow() and default constructor is epoch time instead
- Renamed PdfDocument::GetNameTree() -> GetNames()
- PdfObject: Flate compress on write objects that have no filters
- PdfMemDocument does collect garbage by default when saving
- PdfField/PdfAnntation: Fully reworked the hierarchy and added proper fields ownership
- Added PdfField::GetParent(), PdfField::GetChildren()
- PdfImage: Cleaned/reviewed/fixed SetData()/SetDataRaw()
- Renamed PdfPageTree -> PdfPageCollection
- Added XMP metadata reading/saving. Added PdfMetadata class
- Added text extraction API
- Review I/O API: Merged InputDevice/OutputDevice into StreamDevice.
New hierarchy deriving StreamDevice
- Reviewed PdfObjectStream API: added streaming operations, GetInputStream(),
GetOutputStream(). Renamed GetFilteredCopy() -> GetUnwrappedCopy()/UnwrapTo().
They only unwrap non media filters (see PdfImage::DecodeTo for media ones).
Added proper copy and move assignment operators
- PdfImage: Added DecodeTo(pixelFormat)
- Changes from other older versions
See https://github.com/podofo/podofo/blob/master/CHANGELOG.md
- Change source url to new location.
- Drop podofo-gcc12.patch because source no longer exists.
- Enable of compilation of tools.
- Add podofo-tools_man.patch to fix missing man pages for tools.
* Wed May 04 2022 Marcus Meissner <meissner@suse.com>
- source url switched to https
* Wed May 04 2022 Christophe Giboudeaux <christophe@krop.fr>
- Update to 0.9.8. No changelog. This version ships security
fixes:
* Check that /DecodeParams values are in range
(boo#1127514, CVE-2018-20797)
* CVE-2019-10723 - Excessive memory allocation crash at
PdfPagesTreeCache (boo#1131544)
* CVE-2018-12983 - stack-based buffer over-read in
PdfEncryptMD5Base::ComputeEncryptionKey() (boo#1099719)
- Drop patches, now upstream:
* podofo-CVE-2019-10723.patch
* podofo-CVE-2018-12983.patch
- Drop patch podofo-CVE-2019-20093.patch:
The upstream comment consider the svn repo r2035 doesn't dereference
the NULL pointer, and this security issue already could ends with an
error. The corresponding edition in git repo merged in this release.
(CVE-2019-20093, bsc#1159921)
* Wed Feb 16 2022 Christophe Giboudeaux <christophe@krop.fr>
- Add GCC12 compatibility fix from Fedora (boo#1194962):
* podofo-gcc12.patch
- Add upstream changes:
* podofo-CVE-2019-10723.patch (boo#1131544, CVE-2019-10723)
* podofo-CVE-2018-12983.patch (boo#1099719, CVE-2018-12983)
* Mon Jun 07 2021 Christophe Giboudeaux <christophe@krop.fr>
- Explicitly require libboost_headers_devel. Some public headers
include boost ones.
* Wed Apr 14 2021 Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 0.9.7
- Cleanup of the spec file
- Dropped upstream fixed patches:
r1933-Really-fix-CVE-2017-7381.patch, r1936-Really-fix-CVE-2017-7382.patch
r1937-Really-fix-CVE-2017-7383.patch, r1942-Fix-build-with-cmake-ge-3.12.patch
r1938-Fix-CVE-2018-11256-PdfError-info-gives-not-found-page-0-based.patch
r1941-Fix-CVE-2017-8054-and-other-issues-keeping-binary-compat.patch
r1945-Fix-possible-incompatibility-of-PdfAESStream-with-OpenSSL-1.1.0g.patch
r1948-Fix-CVE-2018-12982-implementing-inline-PdfDictionary-MustGetKey.patch
r1949-Fix-CVE-2018-5783-by-introducing-singleton-limit-for-indirect-objects-keeping-binary-compat.patch
r1950-Fix-null-pointer-dereference-in-PdfTranslator-setTarget.patch
r1952-Fix-CVE-2018-11255-Null-pointer-dereference-in-PdfPage-GetPageNumber.patch
r1953-Fix-CVE-2018-14320-Possible-undefined-behaviour-in-PdfEncoding-ParseToUnicode.patch
r1954-Fix-CVE-2018-20751-null-pointer-dereference-in-crop_page-of-tools-podofocrop.patch
r1961-EncryptTest-Fix-buffer-overflow-in-decrypted-out-buffer-in-TestEncrypt.patch
r1963-Fix-heap-based-buffer-overflow-vulnerability-in-PoDoFo-PdfVariant-DelayedLoad.patch
r1969-Fix-CVE-2019-9687-heap-based-buffer-overflow.patch
r1950-Fix-null-pointer-dereference-in-PdfTranslator-setTarget.patch
(CVE-2018-19532, bsc#1117514)
podofo-CVE-2019-9199.patch
(CVE-2019-9199, bsc#1127855)
* Wed May 15 2019 qzheng <qzheng@suse.com>
- Add r1969-Fix-CVE-2019-9687-heap-based-buffer-overflow.patch
(boo#1129290, CVE-2019-9687).
* Wed Feb 20 2019 Antonio Larrosa <alarrosa@suse.com>
- Add patches from upstream to fix several CVEs:
* r1933-Really-fix-CVE-2017-7381.patch
to fix a null pointer dereference (bsc#1032020, CVE-2017-7381)
* r1936-Really-fix-CVE-2017-7382.patch
to fix a null pointer dereference (bsc#1032021, CVE-2017-7382)
* r1937-Really-fix-CVE-2017-7383.patch
to fix a null pointer dereference (bsc#1032022, CVE-2017-7383)
* r1938-Fix-CVE-2018-11256-PdfError-info-gives-not-found-page-0-based.patch
to fix a null pointer dereference Denial of Service
(bsc#1096889, CVE-2018-11256)
* r1941-Fix-CVE-2017-8054-and-other-issues-keeping-binary-compat.patch
This patch was rebased from the one upstream so that it applies correctly
and modified so it doesn't break binary compatibility.
(CVE-2017-8054, boo#1035596)
* r1945-Fix-possible-incompatibility-of-PdfAESStream-with-OpenSSL-1.1.0g.patch
* r1948-Fix-CVE-2018-12982-implementing-inline-PdfDictionary-MustGetKey.patch
This patch was rebased from the one upstream so that it applies correctly.
(CVE-2018-12982, boo#1099720)
* r1949-Fix-CVE-2018-5783-by-introducing-singleton-limit-for-indirect-objects-keeping-binary-compat.patch
This patch was rebased from the one upstream so that it applies correctly
and modified so it doesn't break binary compatibility.
(CVE-2018-5783, boo#1076962)
* r1950-Fix-null-pointer-dereference-in-PdfTranslator-setTarget.patch
* r1952-Fix-CVE-2018-11255-Null-pointer-dereference-in-PdfPage-GetPageNumber.patch
(CVE-2018-11255, boo#1096890)
* r1953-Fix-CVE-2018-14320-Possible-undefined-behaviour-in-PdfEncoding-ParseToUnicode.patch
(CVE-2018-14320, boo#1108764)
* r1954-Fix-CVE-2018-20751-null-pointer-dereference-in-crop_page-of-tools-podofocrop.patch
(CVE-2018-20751, boo#1124357)
* r1961-EncryptTest-Fix-buffer-overflow-in-decrypted-out-buffer-in-TestEncrypt.patch
This patch was rebased from the one upstream so that it applies correctly.
* r1963-Fix-heap-based-buffer-overflow-vulnerability-in-PoDoFo-PdfVariant-DelayedLoad.patch
- Renamed fix-build.patch to r1942-Fix-build-with-cmake-ge-3.12.patch to
keep its name consistent with the other upstream patches.
/usr/lib/libpodofo.so.0.10.3 /usr/lib/libpodofo.so.2 /usr/share/licenses/libpodofo2 /usr/share/licenses/libpodofo2/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Sep 16 00:42:55 2024