commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2020-10-28 11:37:42 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.3463 (New) Package is "mupdf" Wed Oct 28 11:37:42 2020 rev:43 rq:844022 version:1.18.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2020-06-21 18:58:50.527497057 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new.3463/mupdf.changes2020-10-28 11:38:05.403598298 +0100 @@ -1,0 +2,31 @@ +Sun Oct 25 12:05:00 UTC 2020 - Hsiu-Ming Chang + +- Update to version 1.18.0 + + * mutool draw: bbox output format. + * mutool draw: structured text extraction in JSON format. + * mutool run: StructuredText.walk() + * mutool run: PDFPage.process() and PDFAnnotation.process() + + * mupdf-gl: Added IBM Common User Access shortcuts for copy & paste. + * mupdf-gl: Improved redaction UI. + + * java: Example desktop Java viewer. + * wasm: WebAssembly viewer that runs in a browser. + * html: Added HTML5 parser. + + * api: Dehyphenation option in structured text extraction, to improve searching for words that are hyphenated across lines. + * api: pdf_new_date, pdf_to_date, pdf_dict_put_date and pdf_dict_get_date. + * api: Added choice of image redaction algorithms: none, full, partial. + * api: Optional use of Tesseract to use OCR to extract text. + + * svg: Many small parsing fixes. + * svg: Parse inline CSS style attributes. + * svg: Text elements (simple text layout only). + + * High security redaction -- save redacted PDF as flattened bitmap, guaranteed to not leak any sensitive redacted information. + + * Experimental C++ bindings. + * Experimental Python bindings. + +--- Old: mupdf-1.17.0-source.tar.xz New: mupdf-1.18.0-source.tar.xz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.kyet50/_old 2020-10-28 11:38:07.359599823 +0100 +++ /var/tmp/diff_new_pack.kyet50/_new 2020-10-28 11:38:07.367599829 +0100 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.17.0 +Version:1.18.0 Release:0 Summary:PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0-or-later @@ -40,6 +40,7 @@ BuildRequires: pkgconfig BuildRequires: update-desktop-files BuildRequires: zlib-devel +BuildRequires: libgumbo-devel BuildRequires: pkgconfig(harfbuzz) BuildRequires: pkgconfig(lcms2) BuildRequires: pkgconfig(openssl) @@ -89,6 +90,7 @@ USE_SYSTEM_ZLIB := yes USE_SYSTEM_GLUT := no # need freeglut2-art frok USE_SYSTEM_CURL := yes + USE_SYSTEM_GUMBO := yes " %build ++ mupdf-1.17.0-source.tar.xz -> mupdf-1.18.0-source.tar.xz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.17.0-source.tar.xz /work/SRC/openSUSE:Factory/.mupdf.new.3463/mupdf-1.18.0-source.tar.xz differ: char 26, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2020-06-21 18:52:10 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.3606 (New) Package is "mupdf" Sun Jun 21 18:52:10 2020 rev:42 rq:815901 version:1.17.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2020-06-12 21:44:50.064448988 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new.3606/mupdf.changes2020-06-21 18:58:50.527497057 +0200 @@ -1,0 +2,36 @@ +Fri Jun 19 08:24:38 UTC 2020 - Dan Čermák + +- Update to version 1.17.0 + + * api: Improved accessors for markup/ink/polygon annotation data. + * api: Chapter based API for faster EPUB loading. + * api: Add more documentation to header files. + * api: Improved digital signature signing and verification. + * api: Validate changes in a signed PDF file. + + * build: Moved windows build to VS2019 solution. + + * pdf: Redaction now works on images and links as well as text. + * pdf: Greek, Cyrillic, Chinese, Japanese, and Korean scripts in forms and annotations. + * pdf: File attachment annotations. + * pdf: Use CCITT Fax compression for 1-bit images when creating PDF files. + + * epub: More forgiving XHTML parsing. + * epub: Accelerator files to cache chapter data for faster EPUB loading. + * epub: Optimized memory use. + + * mutool run: Edit Markup, Ink, and Polygon annotation data. + * mutool run: Fill out form fields. + * viewer: Ask for confirmation before closing a PDF with unsaved changes. + * viewer: Embed and extract file attachment annotations. + + * library: Miscellaneous bugfixes. + * library: Fixes to store operation. + + * thirdparty: Updated Harfbuzz to 2.6.4. + * thirdparty: Updated jbig2dec to 0.18. + * thirdparty: Updated MuJS to 1.0.7. + * thirdparty: Updated OpenJPEG to 2.3.1. + * thirdparty: Updated cURL to 7.66.0 (windows only). + +--- Old: mupdf-1.16.1-source.tar.xz New: mupdf-1.17.0-source.tar.xz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.TPtmMm/_old 2020-06-21 18:58:51.115499042 +0200 +++ /var/tmp/diff_new_pack.TPtmMm/_new 2020-06-21 18:58:51.115499042 +0200 @@ -18,17 +18,18 @@ Name: mupdf -Version:1.16.1 +Version:1.17.0 Release:0 Summary:PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0-or-later Group: Productivity/Office/Other URL:https://mupdf.com/ -Source0: https://mupdf.com/downloads/archive/%{name}-%{version}-source.tar.xz +Source0:%{URL}/downloads/archive/%{name}-%{version}-source.tar.xz Source1:%{name}.desktop Source2:%{name}-gl.desktop Patch0: mupdf-no-strip.patch BuildRequires: Mesa-libGL-devel +BuildRequires: fdupes BuildRequires: freeglut-devel BuildRequires: freetype2-devel BuildRequires: gcc-c++ @@ -69,9 +70,7 @@ based on mupdf. %prep -%setup -q -n %{name}-%{version}-source - -%patch0 -p1 +%autosetup -p1 -n %{name}-%{version}-source for d in $(ls thirdparty | grep -v -e freeglut -e lcms2 -e mujs) do @@ -110,6 +109,7 @@ find %{buildroot}/%{_mandir} -type f -exec chmod 0644 {} \; find %{buildroot}/%{_includedir} -type f -exec chmod 0644 {} \; cd %{buildroot}/%{_bindir} && ln -s %{name}-x11 %{name} +%fdupes %{buildroot}%{_datadir} %suse_update_desktop_file mupdf ++ mupdf-1.16.1-source.tar.xz -> mupdf-1.17.0-source.tar.xz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.16.1-source.tar.xz /work/SRC/openSUSE:Factory/.mupdf.new.3606/mupdf-1.17.0-source.tar.xz differ: char 26, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2020-06-12 21:43:24 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.3606 (New) Package is "mupdf" Fri Jun 12 21:43:24 2020 rev:41 rq:814107 version:1.16.1 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2019-09-11 10:37:14.367264064 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new.3606/mupdf.changes2020-06-12 21:44:50.064448988 +0200 @@ -1,0 +2,5 @@ +Fri Jun 12 08:32:08 UTC 2020 - Martin Pluskal + +- Fix building with gcc10 + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.91XZfn/_old 2020-06-12 21:44:52.564448135 +0200 +++ /var/tmp/diff_new_pack.91XZfn/_new 2020-06-12 21:44:52.568448134 +0200 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -23,7 +23,7 @@ Summary:PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0-or-later Group: Productivity/Office/Other -Url:https://mupdf.com/ +URL:https://mupdf.com/ Source0: https://mupdf.com/downloads/archive/%{name}-%{version}-source.tar.xz Source1:%{name}.desktop Source2:%{name}-gl.desktop @@ -94,8 +94,8 @@ %build %global _lto_cflags %{_lto_cflags} -ffat-lto-objects -export XCFLAGS="%{optflags} -fPIC -DJBIG_NO_MEMENTO -DTOFU -DTOFU_CJK" -make %{?_smp_mflags} build=release verbose=yes +export XCFLAGS="%{optflags} -fcommon -fPIC -DJBIG_NO_MEMENTO -DTOFU -DTOFU_CJK" +%make_build build=release verbose=yes %install %make_install build=release prefix=%{_prefix} libdir=%{_libdir} @@ -130,7 +130,7 @@ %{_datadir}/icons/hicolor/scalable %{_datadir}/icons/hicolor/scalable/apps %{_datadir}/icons/hicolor/scalable/apps/* -%{_mandir}/man1/*.1.gz +%{_mandir}/man1/*.1%{?ext_man} %files devel-static %{_includedir}/%{name}
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2019-09-11 10:37:14 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.7948 (New) Package is "mupdf" Wed Sep 11 10:37:14 2019 rev:40 rq:729872 version:1.16.1 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2019-08-19 21:37:57.108363323 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new.7948/mupdf.changes2019-09-11 10:37:14.367264064 +0200 @@ -1,0 +2,5 @@ +Tue Sep 10 11:41:20 UTC 2019 - Christophe Giboudeaux + +- Use -ffat-lto-objects when building static libraries. + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.3v2cqS/_old 2019-09-11 10:37:15.323263787 +0200 +++ /var/tmp/diff_new_pack.3v2cqS/_new 2019-09-11 10:37:15.327263786 +0200 @@ -93,6 +93,7 @@ " %build +%global _lto_cflags %{_lto_cflags} -ffat-lto-objects export XCFLAGS="%{optflags} -fPIC -DJBIG_NO_MEMENTO -DTOFU -DTOFU_CJK" make %{?_smp_mflags} build=release verbose=yes
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2019-08-19 21:37:46 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.22127 (New) Package is "mupdf" Mon Aug 19 21:37:46 2019 rev:39 rq:724125 version:1.16.1 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2019-03-26 15:43:55.124185231 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new.22127/mupdf.changes 2019-08-19 21:37:57.108363323 +0200 @@ -1,0 +2,60 @@ +Wed Aug 14 23:38:39 UTC 2019 - Xaver Hellauer + +- Update to version 1.16.1 + * Changes in version 1.16.1: +* Bugfixes + * Changes in version 1.16.0: +* api: Major overhaul of color management architecture. +* api: Improved functions to verify/sign PDF documents. +* api: Number tree accessor function pdf_lookup_number. +* api: Parse and handle more options for PWG output. +* api: Removed obsolete gproof document type. +* api: User callbacks for warning and error messages. +* epub: Changed default page size to A5. +* epub: Draw embedded SVG documents in EPUB/XHTML. +* epub: New Noto fonts covering more unicode scripts. +* epub: Support small-caps font-variant. +* pdf: Add Redact annotation type and function to apply redactions. +* pdf: Add/remove/change encryption and password when saving PDF files. +* pdf: Improvements to text handling in PDF filter processor. +* pdf: MP and DP operators now call begin/end_layer device methods. +* pdf: New and improved progressive loading. +* svg: Draw external images in SVG documents. +* mutool show: Add 'form' selector to list PDF form fields. +* mutool sign: Sign PDF documents from the command line. +* mutool sign: Verify signatures in PDF documents from the command line. +* viewer: Option to save a script of user actions for replay with mutool run. +* viewer: Runtime toggle for ICC and spot rendering. +* viewer: Tooltip when hovering over a link in mupdf-gl. + * Changes in version 1.15.0: +* WebAssembly build target and examples. +* Improved forms API in both C and Java bindings. +* Improved forms JavaScript support. +* Create appearance streams for more form field types. +* Fixed many bugs in ICC color management. +* Fixed many memory leaks in error cleanup. +* Fixed bugs in pdfwrite output. +* Improved text extraction from LaTeX documents with math symbols. +* Improved trace device formatting. +* Support CBZ and CBT files larger than 2Gb. +* Show table of contents for FB2 and XHTML documents. +* Show embedded raster images in SVG and XHTML documents. +* Show FB2 cover page. +* Add option to save PDF files without encryption. +* Add inhibit-spaces option to stext device to turn off missing space detection. +* Simplified fz_try/fz_always/fz_catch macros. +* mupdf-gl improvements: + * Automatically open annotation editor when selecting an annotation. + * Full page color tinting option in mupdf-gl. + * Show/hide table of contents sections. + * Trigger a reload with sighup. + * Toggle spot color mode with 'e'. +- Remove merged patches: + * mupdf-CVE-2018-16647.patch + * mupdf-CVE-2018-16648.patch + * mupdf-CVE-2018-18662.patch + * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch + * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch + * 0001-fix-build-on-big-endian.patch + +--- Old: 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch 0001-Write-placeholder-appearance-streams-for-digital-sig.patch 0001-fix-build-on-big-endian.patch mupdf-1.14.0-source.tar.xz mupdf-CVE-2018-16647.patch mupdf-CVE-2018-16648.patch mupdf-CVE-2018-18662.patch New: mupdf-1.16.1-source.tar.xz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.7gf18w/_old 2019-08-19 21:37:59.312361936 +0200 +++ /var/tmp/diff_new_pack.7gf18w/_new 2019-08-19 21:37:59.312361936 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.14.0 +Version:1.16.1 Release:0 Summary:PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0-or-later @@ -28,12 +28,6 @@ Source1:%{name}.desktop Source2:%{name}-gl.desktop Patch0: mupdf-no-strip.patch -Patch1: mupdf-CVE-2018-16647.patch -Patch2: mupdf-CVE-2018-16648.patch -Patch3: mupdf-CVE-2018-18662.patch -Patch4: 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch -Patch5: 0001-Write-placeholder-appearance-streams-for-digital-sig.patc
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2019-03-26 15:43:18 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new.25356 (New) Package is "mupdf" Tue Mar 26 15:43:18 2019 rev:38 rq:685966 version:1.14.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-05-02 12:17:09.818935790 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new.25356/mupdf.changes 2019-03-26 15:43:55.124185231 +0100 @@ -1,0 +2,64 @@ +Thu Mar 14 21:30:03 UTC 2019 - Yunhe Guo + +- Update source download link so we can submit it to Factory + +--- +Mon Mar 11 14:26:01 UTC 2019 - Yunhe Guo + +- Add build dependencies: + * liblcms2-devel + * Mesa-libGL-devel + * freeglut-devel + * pkgconfig(openssl) + * pkgconfig(xi) + * pkgconfig(xrandr) +- Change COPYING to %licnese instead of %doc +- Update mupdf-no-strip.patch +- Add patches from Fedora project: + * mupdf-CVE-2018-16647.patch + * mupdf-CVE-2018-16648.patch + * mupdf-CVE-2018-18662.patch + * 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch + * 0001-Write-placeholder-appearance-streams-for-digital-sig.patch + * 0001-fix-build-on-big-endian.patch +- Update to version 1.14: + * New features: +* Added "Source Han Serif" CJK fallback font. +* Added more scripts to the Noto fallback fonts. +* Multi-page PNM support. +* "mutool show" now supports a path syntax for selecting objects to show. + * Build system simplifications: +* Auto-generated CMap, ICC, and JS source files are checked in to git. +* Embedded CMap resources are now generated by a python script. +* Embedded font resources are linked directly if using GNU ld or windows. +* Namegen tool replaced by use of C macros. +* Simplified Makefile. + * Annotation editing: +* New annotation editing mode in mupdf-gl. +* Can create, edit, and delete most annotation types. +* Can create appearance streams for most annotation types. +* Can create appearance streams for Tx form fields. +* Can create appearance streams for Ch form fields. + * Form filling in mupdf-gl: +* Can click buttons, checkboxes, and radioboxes. +* Can fill out text fields using dialog box. +* Can select choice options using dialog box. +* Can verify and sign digital signatures. + * Improved UI for mupdf-gl: +* Password dialog. +* Error dialog. +* Open/save file dialog. +* Snap selection to words or lines by holding control or control+shift. +* Save and restore current location, bookmarks, and navigation history. + * Bug fixes: +* Improved CJK character fallback handling in EPUB. + * API changes: +* Pass rectangle and matrix structs by value. +* Replaced PDF_NAME_Xxx macros with PDF_NAME(Xxx). +* Added PDF_TRUE, PDF_FALSE, and PDF_NULL constant pdf_obj* macros. +* Added helper functions: pdf_dict_get_int, etc. +* Removed 'doc' argument in pdf_new_int, etc. +* Quads instead of rects when highlighting and searching text. +* mutool run: Pass arguments to script in scriptArgs global. + +--- Old: mupdf-1.13.0.tar.xz mupdf.png New: 0001-Fix-699840-Use-saved-sig_widget-pointer-to-sign-sign.patch 0001-Write-placeholder-appearance-streams-for-digital-sig.patch 0001-fix-build-on-big-endian.patch mupdf-1.14.0-source.tar.xz mupdf-CVE-2018-16647.patch mupdf-CVE-2018-16648.patch mupdf-CVE-2018-18662.patch mupdf-gl.desktop Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.016NnY/_old 2019-03-26 15:43:58.552181214 +0100 +++ /var/tmp/diff_new_pack.016NnY/_new 2019-03-26 15:43:58.576181186 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -13,21 +13,29 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # Name: mupdf -Version:1.13.0 +Version:1.14.0 Release:0 Summary:PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0-or-later Group: Productivity/Office/Other Url:https://mupdf.com/ -Source0: https://mupdf.com/downloads/mupdf-%{version}-source.tar.
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-05-02 12:17:05 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Wed May 2 12:17:05 2018 rev:37 rq:602788 version:1.13.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-04-25 09:59:06.951764208 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-05-02 12:17:09.818935790 +0200 @@ -1,0 +2,5 @@ +Mon Apr 23 14:10:10 UTC 2018 - jeng...@inai.de + +- Ensure neutrality of description. + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.LByOz9/_old 2018-05-02 12:17:12.054854211 +0200 +++ /var/tmp/diff_new_pack.LByOz9/_new 2018-05-02 12:17:12.058854065 +0200 @@ -20,8 +20,8 @@ Name: mupdf Version:1.13.0 Release:0 -Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library -License:AGPL-3.0+ +Summary:PDF and XPS Viewer and Parser and Rendering Library +License:AGPL-3.0-or-later Group: Productivity/Office/Other Url:https://mupdf.com/ Source0: https://mupdf.com/downloads/mupdf-%{version}-source.tar.xz#/%{name}-%{version}.tar.xz @@ -43,15 +43,15 @@ Requires: xdg-utils %description -MuPDF is a lightweight PDF and XPS viewer and parser/rendering library. +MuPDF is a PDF and XPS viewer and parser/rendering library. -The renderer in MuPDF is tailored for high quality anti-aliased graphics. It -renders text with metrics and spacing accurate to within fractions of a pixel -for the highest fidelity in reproducing the look of a printed page on screen. +The renderer in MuPDF is tailored for anti-aliased graphics. It +renders text with metrics and spacing accurate to within fractions of +a pixel for reproducing the look of a printed page on screen. -MuPDF is also small, fast, and yet complete. It supports PDF 1.7 with -transparency, encryption, hyperlinks, annotations, search and many other bells -and whistles. MuPDF can also read XPS documents (OpenXPS/ECMA-388). +MuPDF supports PDF 1.7 with transparency, encryption, hyperlinks, +annotations and search. MuPDF can also read XPS documents +(OpenXPS/ECMA-388). %package devel-static Summary:Development Files for mupdf
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-04-25 09:58:48 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Wed Apr 25 09:58:48 2018 rev:36 rq:599916 version:1.13.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-02-16 21:38:07.269266221 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-04-25 09:59:06.951764208 +0200 @@ -1,0 +2,17 @@ +Mon Apr 23 07:36:23 UTC 2018 - kbabi...@suse.com + +- Update to version 1.13: + - primarily a bugfix release. + - New "mutool sign" tool for showing and verifying digital signatures. + - Chinese, Japanese, Korean, Cyrillic, and Greek font support in mutool create. + - Improvements to annotation editing API. +- Dropped patches, which are included upstream now: + - CVE-2018-6192.patch + - CVE-2018-5686.patch + - CVE-2018-6187.patch + - CVE-2018-151.patch + - CVE-2017-17858.patch + - CVE-2018-6544.patch + - fix-openjpeg-flags.patch + +--- Old: CVE-2017-17858.patch CVE-2018-151.patch CVE-2018-5686.patch CVE-2018-6187.patch CVE-2018-6192.patch CVE-2018-6544.patch fix-openjpeg-flags.patch mupdf-1.12.0.tar.xz New: mupdf-1.13.0.tar.xz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.OKs652/_old 2018-04-25 09:59:08.367712263 +0200 +++ /var/tmp/diff_new_pack.OKs652/_new 2018-04-25 09:59:08.367712263 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.12.0 +Version:1.13.0 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ @@ -27,14 +27,7 @@ Source0: https://mupdf.com/downloads/mupdf-%{version}-source.tar.xz#/%{name}-%{version}.tar.xz Source1:mupdf.desktop Source2:mupdf.png -Patch1: fix-openjpeg-flags.patch -Patch2: CVE-2018-5686.patch -Patch3: CVE-2017-17858.patch -Patch4: CVE-2018-6187.patch -Patch5: CVE-2018-6192.patch -Patch6: CVE-2018-6544.patch -Patch7: CVE-2018-151.patch -Patch8: mupdf-no-strip.patch +Patch0: mupdf-no-strip.patch BuildRequires: freetype2-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -71,14 +64,7 @@ %prep %setup -q -n %{name}-%{version}-source -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 -%patch6 -p1 -%patch7 -p1 -%patch8 -p1 +%patch0 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) ++ mupdf-1.12.0.tar.xz -> mupdf-1.13.0.tar.xz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.12.0.tar.xz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.13.0.tar.xz differ: char 26, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-02-16 21:38:03 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Fri Feb 16 21:38:03 2018 rev:35 rq:576860 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-02-14 09:19:39.033511290 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-02-16 21:38:07.269266221 +0100 @@ -1,0 +2,10 @@ +Wed Feb 14 18:46:28 UTC 2018 - crrodrig...@opensuse.org + +-mupdf-no-strip.patch: fix debuginfo generation + +--- +Wed Feb 14 18:09:24 UTC 2018 - crrodrig...@opensuse.org + +- Remove xorg-x11-devel from buildrequires + +--- New: mupdf-no-strip.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.iKRhbU/_old 2018-02-16 21:38:08.793211204 +0100 +++ /var/tmp/diff_new_pack.iKRhbU/_new 2018-02-16 21:38:08.793211204 +0100 @@ -34,6 +34,7 @@ Patch5: CVE-2018-6192.patch Patch6: CVE-2018-6544.patch Patch7: CVE-2018-151.patch +Patch8: mupdf-no-strip.patch BuildRequires: freetype2-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -42,9 +43,10 @@ BuildRequires: openjpeg2-devel BuildRequires: pkgconfig BuildRequires: update-desktop-files -BuildRequires: xorg-x11-devel BuildRequires: zlib-devel BuildRequires: pkgconfig(harfbuzz) +BuildRequires: pkgconfig(x11) +BuildRequires: pkgconfig(xext) Requires: xdg-utils %description @@ -76,7 +78,7 @@ %patch5 -p1 %patch6 -p1 %patch7 -p1 - +%patch8 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) @@ -91,7 +93,7 @@ %build # do no set CFLAGS which is used by the build system itself! -export XCFLAGS="%{optflags} -fPIC -lpthread" +export XCFLAGS="%{optflags} -fPIC -pthread" make %{?_smp_mflags} \ build=release \ verbose=yes \ ++ mupdf-no-strip.patch ++ Index: mupdf-1.12.0-source/Makerules === --- mupdf-1.12.0-source.orig/Makerules +++ mupdf-1.12.0-source/Makerules @@ -25,8 +25,8 @@ ifeq "$(build)" "debug" CFLAGS += -pipe -g LDFLAGS += -g else ifeq "$(build)" "release" -CFLAGS += -pipe -O2 -DNDEBUG -fomit-frame-pointer -LDFLAGS += $(LDREMOVEUNREACH) -Wl,-s +CFLAGS += -pipe -O2 -DNDEBUG +LDFLAGS += $(LDREMOVEUNREACH) else ifeq "$(build)" "small" CFLAGS += -pipe -Os -DNDEBUG -fomit-frame-pointer LDFLAGS += $(LDREMOVEUNREACH) -Wl,-s
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-02-14 09:19:33 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Wed Feb 14 09:19:33 2018 rev:34 rq:575495 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-02-09 15:44:47.757316198 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-02-14 09:19:39.033511290 +0100 @@ -1,0 +2,7 @@ +Mon Feb 12 07:53:53 UTC 2018 - kbabi...@suse.com + +- Add CVE-2018-151.patch: Fix a Use After Free vulnerability in + fz_keep_key_storable that can potentially result in DoS / remote + code execution (CVE-2018-151 bsc#1080531) + +--- New: CVE-2018-151.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.nmHLET/_old 2018-02-14 09:19:40.277466201 +0100 +++ /var/tmp/diff_new_pack.nmHLET/_new 2018-02-14 09:19:40.281466056 +0100 @@ -33,6 +33,7 @@ Patch4: CVE-2018-6187.patch Patch5: CVE-2018-6192.patch Patch6: CVE-2018-6544.patch +Patch7: CVE-2018-151.patch BuildRequires: freetype2-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -74,6 +75,7 @@ %patch4 -p1 %patch5 -p1 %patch6 -p1 +%patch7 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) ++ CVE-2018-151.patch ++ >From 321ba1de287016b0036bf4a56ce774ad11763384 Mon Sep 17 00:00:00 2001 From: Sebastian Rasmussen Date: Tue, 19 Dec 2017 23:47:47 +0100 Subject: [PATCH] Bug 698825: Do not drop borrowed colorspaces. Previously the borrowed colorspace was dropped when updating annotation appearances, leading to use after free warnings from valgrind/ASAN. --- source/pdf/pdf-appearance.c | 8 ++-- 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/source/pdf/pdf-appearance.c b/source/pdf/pdf-appearance.c index 70f684f..d7a1ddd 100644 --- a/source/pdf/pdf-appearance.c +++ b/source/pdf/pdf-appearance.c @@ -2170,7 +2170,6 @@ void pdf_update_free_text_annot_appearance(fz_context *ctx, pdf_document *doc, p fz_device *dev = NULL; font_info font_rec; fz_text *text = NULL; - fz_colorspace *cs = NULL; fz_matrix page_ctm; pdf_page_transform(ctx, annot->page, NULL, &page_ctm); @@ -2184,11 +2183,11 @@ void pdf_update_free_text_annot_appearance(fz_context *ctx, pdf_document *doc, p fz_var(dlist); fz_var(dev); fz_var(text); - fz_var(cs); fz_try(ctx) { char *contents = pdf_to_str_buf(ctx, pdf_dict_get(ctx, obj, PDF_NAME_Contents)); char *da = pdf_to_str_buf(ctx, pdf_dict_get(ctx, obj, PDF_NAME_DA)); + fz_colorspace *cs; fz_point pos; fz_rect rect; @@ -2223,7 +,6 @@ void pdf_update_free_text_annot_appearance(fz_context *ctx, pdf_document *doc, p fz_drop_display_list(ctx, dlist); font_info_fin(ctx, &font_rec); fz_drop_text(ctx, text); - fz_drop_colorspace(ctx, cs); } fz_catch(ctx) { @@ -2359,7 +2357,6 @@ void pdf_set_signature_appearance(fz_context *ctx, pdf_document *doc, pdf_annot fz_device *dev = NULL; font_info font_rec; fz_text *text = NULL; - fz_colorspace *cs = NULL; fz_path *path = NULL; fz_buffer *fzbuf = NULL; fz_matrix page_ctm; @@ -2375,7 +2372,6 @@ void pdf_set_signature_appearance(fz_context *ctx, pdf_document *doc, pdf_annot fz_var(dlist); fz_var(dev); fz_var(text); - fz_var(cs); fz_var(fzbuf); fz_try(ctx) { @@ -2384,6 +2380,7 @@ void pdf_set_signature_appearance(fz_context *ctx, pdf_document *doc, pdf_annot fz_rect logo_bounds; fz_matrix logo_tm; fz_rect rect; + fz_colorspace *cs = fz_device_rgb(ctx); /* Borrowed reference */ pdf_to_rect(ctx, pdf_dict_get(ctx, annot->obj, PDF_NAME_Rect), &annot_rect); rect = annot_rect; @@ -2396,7 +2393,6 @@ void pdf_set_signature_appearance(fz_context *ctx, pdf_document *doc, pdf_annot fz_bound_path(ctx, path, NULL, &fz_identity, &logo_bounds); center_rect_within_rect(&logo_bounds, &rect, &logo_tm); fz_concat(&logo_tm, &logo_tm, &page_ctm); - cs = fz_device_rgb(ctx); /* Borrowed reference */ fz_fill_path(ctx, dev, path, 0, &logo_tm, cs, logo_color, 1.0f, NULL);
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-02-09 15:44:40 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Fri Feb 9 15:44:40 2018 rev:33 rq:573349 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-02-05 10:49:22.142534534 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-02-09 15:44:47.757316198 +0100 @@ -1,0 +2,5 @@ +Tue Feb 6 14:36:54 UTC 2018 - meiss...@suse.com + +- use freetype2-devel explictily as buildrequires + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.VatteD/_old 2018-02-09 15:44:50.537216384 +0100 +++ /var/tmp/diff_new_pack.VatteD/_new 2018-02-09 15:44:50.541216240 +0100 @@ -33,7 +33,7 @@ Patch4: CVE-2018-6187.patch Patch5: CVE-2018-6192.patch Patch6: CVE-2018-6544.patch -BuildRequires: freetype-devel +BuildRequires: freetype2-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel BuildRequires: libcurl-devel
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-02-05 10:49:21 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Mon Feb 5 10:49:21 2018 rev:32 rq:572218 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-01-26 13:35:22.932832924 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-02-05 10:49:22.142534534 +0100 @@ -1,0 +2,21 @@ +Fri Feb 2 20:48:34 UTC 2018 - kbabi...@suse.com + +- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192 + boo#1077755) + +--- +Fri Feb 2 14:58:40 UTC 2018 - kbabi...@suse.com + +- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in + pdf/pdf-xref.c (CVE-2018-6544 boo#1079100) + +- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within + pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755) + +--- +Fri Feb 2 07:52:06 UTC 2018 - kbabi...@suse.com + +- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c + in the do_pdf_save_document function (CVE-2018-6187 boo#1077407) + +--- New: CVE-2018-6187.patch CVE-2018-6192.patch CVE-2018-6544.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.NOOhEt/_old 2018-02-05 10:49:23.314479670 +0100 +++ /var/tmp/diff_new_pack.NOOhEt/_new 2018-02-05 10:49:23.318479482 +0100 @@ -30,6 +30,9 @@ Patch1: fix-openjpeg-flags.patch Patch2: CVE-2018-5686.patch Patch3: CVE-2017-17858.patch +Patch4: CVE-2018-6187.patch +Patch5: CVE-2018-6192.patch +Patch6: CVE-2018-6544.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -68,6 +71,9 @@ %patch1 -p1 %patch2 -p1 %patch3 -p1 +%patch4 -p1 +%patch5 -p1 +%patch6 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) ++ CVE-2018-6187.patch ++ X-Git-Url: http://git.ghostscript.com/?p=mupdf.git;a=blobdiff_plain;f=source%2Fpdf%2Fpdf-write.c;h=bc67f003025516c04991758ea648f79d00926742;hp=a7326a173a09df3fd4e3adbf3e1842081b6dfea4;hb=3e30fbb7bf5efd88df431e366492356e7eb969ec;hpb=b03def134988da8c800adac1a38a41a1f09a1d89 Index: mupdf-1.12.0-source/source/pdf/pdf-write.c === --- mupdf-1.12.0-source.orig/source/pdf/pdf-write.c +++ mupdf-1.12.0-source/source/pdf/pdf-write.c @@ -633,7 +633,8 @@ expand_lists(fz_context *ctx, pdf_write_ { int i; - num++; + /* objects are numbered 0..num and maybe two additional objects for linearization */ + num += 3; opts->use_list = fz_resize_array(ctx, opts->use_list, num, sizeof(*opts->use_list)); opts->ofs_list = fz_resize_array(ctx, opts->ofs_list, num, sizeof(*opts->ofs_list)); opts->gen_list = fz_resize_array(ctx, opts->gen_list, num, sizeof(*opts->gen_list)); @@ -1522,9 +1523,9 @@ static void preloadobjstms(fz_context *c { pdf_obj *obj; int num; - int xref_len = pdf_xref_len(ctx, doc); - for (num = 0; num < xref_len; num++) + /* xref_len may change due to repair, so check it every iteration */ + for (num = 0; num < pdf_xref_len(ctx, doc); num++) { if (pdf_get_xref_entry(ctx, doc, num)->type == 'o') { @@ -2755,7 +2756,7 @@ static void initialise_write_state(fz_co opts->continue_on_error = in_opts->continue_on_error; opts->errors = in_opts->errors; - expand_lists(ctx, opts, xref_len + 3); + expand_lists(ctx, opts, xref_len); } /* Free the resources held by the dynamic write options */ @@ -2889,6 +2890,9 @@ do_pdf_save_document(fz_context *ctx, pd { pdf_ensure_solid_xref(ctx, doc, xref_len); preloadobjstms(ctx, doc); + + xref_len = pdf_xref_len(ctx, doc); /* May have changed due to repair */ + expand_lists(ctx, opts, xref_len); } /* Sweep & mark objects from the trailer */ @@ -2897,6 +2901,7 @@ do_pdf_save_document(fz_context *ctx, pd else { xref_len = pdf_xref_len(ctx, doc); /* May have changed due to repair */ + expand_lists(ctx, opts, xref_len); for (num = 0; num < xref_len; num++) opt
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-01-26 13:35:17 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Fri Jan 26 13:35:17 2018 rev:31 rq:569433 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2018-01-20 11:24:30.510555634 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-01-26 13:35:22.932832924 +0100 @@ -1,0 +2,12 @@ +Tue Jan 23 09:12:22 UTC 2018 - kbabi...@suse.com + +- Add CVE-2017-17858.patch to fix an heap-based buffer overflow + CVE-2017-17858 bsc#1077161 + +--- +Mon Jan 22 12:20:48 UTC 2018 - idon...@suse.com + +- Add CVE-2018-5686.patch to fix an infinite loop + CVE-2018-5686 bsc#1075936 + +--- @@ -32,0 +45 @@ +- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027) New: CVE-2017-17858.patch CVE-2018-5686.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.JVdNvS/_old 2018-01-26 13:35:24.284769778 +0100 +++ /var/tmp/diff_new_pack.JVdNvS/_new 2018-01-26 13:35:24.288769592 +0100 @@ -28,6 +28,8 @@ Source1:mupdf.desktop Source2:mupdf.png Patch1: fix-openjpeg-flags.patch +Patch2: CVE-2018-5686.patch +Patch3: CVE-2017-17858.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -64,6 +66,8 @@ %prep %setup -q -n %{name}-%{version}-source %patch1 -p1 +%patch2 -p1 +%patch3 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) ++ CVE-2017-17858.patch ++ >From 55c3f68d638ac1263a386e0aaa004bb6e8bde731 Mon Sep 17 00:00:00 2001 From: Sebastian Rasmussen Date: Mon, 11 Dec 2017 14:09:15 +0100 Subject: [PATCH] Bugs 698804/698810/698811: Keep PDF object numbers below limit. This ensures that: * xref tables with objects pointers do not grow out of bounds. * other readers, e.g. Adobe Acrobat can parse PDFs written by mupdf. --- include/mupdf/pdf/object.h | 3 +++ source/pdf/pdf-repair.c| 5 + source/pdf/pdf-xref.c | 21 - 3 files changed, 16 insertions(+), 13 deletions(-) Index: mupdf-1.12.0-source/include/mupdf/pdf/object.h === --- mupdf-1.12.0-source.orig/include/mupdf/pdf/object.h +++ mupdf-1.12.0-source/include/mupdf/pdf/object.h @@ -3,6 +3,9 @@ typedef struct pdf_document_s pdf_document; +/* Defined in PDF 1.7 according to Acrobat limit. */ +#define PDF_MAX_OBJECT_NUMBER 8388607 + /* * Dynamic objects. * The same type of objects as found in PDF and PostScript. Index: mupdf-1.12.0-source/source/pdf/pdf-repair.c === --- mupdf-1.12.0-source.orig/source/pdf/pdf-repair.c +++ mupdf-1.12.0-source/source/pdf/pdf-repair.c @@ -6,9 +6,6 @@ /* Scan file for objects and reconstruct xref table */ -/* Define in PDF 1.7 to be 8388607, but mupdf is more lenient. */ -#define MAX_OBJECT_NUMBER (10 << 20) - struct entry { int num; @@ -436,7 +433,7 @@ pdf_repair_xref(fz_context *ctx, pdf_doc break; } - if (num <= 0 || num > MAX_OBJECT_NUMBER) + if (num <= 0 || num > PDF_MAX_OBJECT_NUMBER) { fz_warn(ctx, "ignoring object with invalid object number (%d %d R)", num, gen); goto have_next_token; Index: mupdf-1.12.0-source/source/pdf/pdf-xref.c === --- mupdf-1.12.0-source.orig/source/pdf/pdf-xref.c +++ mupdf-1.12.0-source/source/pdf/pdf-xref.c @@ -868,11 +868,12 @@ pdf_read_old_xref(fz_context *ctx, pdf_d fz_seek(ctx, file, -(2 + (int)strlen(s)), SEEK_CUR); } - if (ofs < 0) - fz_throw(ctx, FZ_ERROR_GENERIC, "out of range object num in xref: %d", (int)ofs); - if (ofs > INT64_MAX - len) - fz_throw(ctx, FZ_ERROR_GENERIC, "xref section object numbers too big"); - + if (ofs < 0 || ofs > PDF_MAX_OBJECT_NUMBER + || len < 0 || len > PDF_MAX_OBJECT_NUMBER + || ofs + len - 1 > PDF_MAX_OBJECT_NUMBER) + { + fz_throw(ctx, FZ_ERROR_GENERIC, "xref subsection ob
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2018-01-20 11:24:27 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Sat Jan 20 11:24:27 2018 rev:30 rq:564446 version:1.12.0 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-11-14 14:18:20.337174963 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2018-01-20 11:24:30.510555634 +0100 @@ -1,0 +2,33 @@ +Sun Jan 14 03:11:32 UTC 2018 - avin...@opensuse.org + +- Update to version 1.12.0 + * Color Management: ++ LCMS2 library for color management ++ CMYK rendering with overprint simulation ++ Spot color rendering ++ Transparency rendering fixes + * Structured text output improvements: ++ Reworked structured text API ++ Faster text searching ++ Highlight and copy text by selecting lines instead of by + area ++ New semantic XHTML output format ++ New layout preserving HTML output format + * Features and improvements: ++ Improved non-AA rendering with new scan converter ++ Improved LARGEFILE support ++ Improved TIFF support ++ Improved documentation ++ PCLm output. ++ PSD output. ++ New "mutool trace" tool. ++ New "mutool sign" tool (work in progress). ++ Text redaction (work in progress). ++ Lots of bug fixes. +- Strip "-source" from tarball name +- Switch to xz release (13mb smaller) +- rebase fix-openjpeg-flags.patch +- drop reproducible.patch + * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368 + +--- Old: mupdf-1.11-source.tar.gz reproducible.patch New: mupdf-1.12.0.tar.xz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.akLOOA/_old 2018-01-20 11:24:32.598458019 +0100 +++ /var/tmp/diff_new_pack.akLOOA/_new 2018-01-20 11:24:32.602457832 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -18,18 +18,16 @@ Name: mupdf -Version:1.11 +Version:1.12.0 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ Group: Productivity/Office/Other Url:https://mupdf.com/ -Source0:https://mupdf.com/downloads/mupdf-%{version}-source.tar.gz +Source0: https://mupdf.com/downloads/mupdf-%{version}-source.tar.xz#/%{name}-%{version}.tar.xz Source1:mupdf.desktop Source2:mupdf.png Patch1: fix-openjpeg-flags.patch -# PATCH-FIX-UPSTREAM https://bugs.ghostscript.com/show_bug.cgi?id=697958 -Patch9: reproducible.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -66,12 +64,10 @@ %prep %setup -q -n %{name}-%{version}-source %patch1 -p1 -%patch9 -p1 # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) -mkdir docs/examples for src in docs/*.c; do if [ -r "$src" ]; then ln -s "$src" "docs/examples/${src##*/}" @@ -120,8 +116,8 @@ %endif %files -%doc CHANGES COPYING README docs/naming.txt docs/overview.txt -%doc docs/progressive.txt docs/refcount.txt docs/examples/ +%doc CHANGES COPYING README +%doc docs/examples/ %{_bindir}/mupdf %{_bindir}/mutool %{_datadir}/applications/mupdf.desktop ++ fix-openjpeg-flags.patch ++ --- /var/tmp/diff_new_pack.akLOOA/_old 2018-01-20 11:24:32.622456897 +0100 +++ /var/tmp/diff_new_pack.akLOOA/_new 2018-01-20 11:24:32.622456897 +0100 @@ -1,12 +1,12 @@ -Index: mupdf-1.11-source/source/fitz/load-jpx.c +Index: b/source/fitz/load-jpx.c === mupdf-1.11-source.orig/source/fitz/load-jpx.c -+++ mupdf-1.11-source/source/fitz/load-jpx.c -@@ -444,7 +444,6 @@ fz_load_jpx_info(fz_context *ctx, unsign +--- a/source/fitz/load-jpx.c b/source/fitz/load-jpx.c +@@ -445,7 +445,6 @@ #else /* HAVE_LURATECH */ -#define OPJ_STATIC #define OPJ_HAVE_INTTYPES_H - #if !defined(_WIN32) && !defined(_WIN64) + #if !defined(_MSC_VER) || _MSC_VER >= 1600 #define OPJ_HAVE_STDINT_H
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-11-14 14:18:16 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Tue Nov 14 14:18:16 2017 rev:29 rq:540468 version:1.11 Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-08-12 19:33:07.610771701 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-11-14 14:18:20.337174963 +0100 @@ -1,0 +2,20 @@ +Fri Nov 10 08:15:18 UTC 2017 - aloi...@gmx.com + +- Update to version 1.11 + * This is primarily a bug fix release. + * PDF portfolio support with command line tool "mutool +portfolio". + * Add callbacks to load fallback fonts from the system. + * Use system fonts in Android to reduce install size. + * Flag to disable publisher styles in EPUB layout. + * Improved SVG output. + +- Refreshed fix-openjpeg-flags.patch and reproducible.patch + +- Dropped CVE-2017-5896.patch, bsc1023760.patch, + CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch, + CVE-2016-10132.patch, CVE-2016-10133.patch, + CVE-2016-10141.patch, CVE-2017-5627.patch + and CVE-2017-5628.patch (merged or adapted upstream) + +--- Old: CVE-2016-10132.patch CVE-2016-10133.patch CVE-2016-10141.patch CVE-2016-10221.patch CVE-2016-8728.patch CVE-2017-5627.patch CVE-2017-5628.patch CVE-2017-5896.patch CVE-2017-7976.patch bsc1023760.patch mupdf-1.10a-source.tar.gz New: mupdf-1.11-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.16edEG/_old 2017-11-14 14:18:22.601092378 +0100 +++ /var/tmp/diff_new_pack.16edEG/_new 2017-11-14 14:18:22.601092378 +0100 @@ -18,40 +18,30 @@ Name: mupdf -Version:1.10a +Version:1.11 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ Group: Productivity/Office/Other -Url:http://mupdf.com/ -Source0:http://mupdf.com/downloads/mupdf-%{version}-source.tar.gz +Url:https://mupdf.com/ +Source0:https://mupdf.com/downloads/mupdf-%{version}-source.tar.gz Source1:mupdf.desktop Source2:mupdf.png Patch1: fix-openjpeg-flags.patch -Patch2: CVE-2016-10132.patch -Patch3: CVE-2016-10133.patch -Patch4: CVE-2016-10141.patch -Patch5: CVE-2017-5627.patch -Patch6: CVE-2017-5628.patch -Patch7: CVE-2017-5896.patch -Patch8: bsc1023760.patch # PATCH-FIX-UPSTREAM https://bugs.ghostscript.com/show_bug.cgi?id=697958 Patch9: reproducible.patch -Patch10:CVE-2016-8728.patch -Patch11:CVE-2017-7976.patch -Patch12:CVE-2016-10221.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel BuildRequires: libcurl-devel BuildRequires: libjpeg-devel BuildRequires: openjpeg2-devel +BuildRequires: pkgconfig BuildRequires: update-desktop-files BuildRequires: xorg-x11-devel BuildRequires: zlib-devel BuildRequires: pkgconfig(harfbuzz) Requires: xdg-utils -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description MuPDF is a lightweight PDF and XPS viewer and parser/rendering library. @@ -76,20 +66,7 @@ %prep %setup -q -n %{name}-%{version}-source %patch1 -p1 -%patch7 -p1 -%patch8 -p1 %patch9 -p1 -%patch10 -p1 -%patch11 -p1 -%patch12 -p1 - -pushd ./thirdparty/mujs -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 -%patch6 -p1 -popd # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) @@ -101,7 +78,8 @@ fi done -sed -i s,'INSTALL_APPS := .*','INSTALL_APPS := $(MUTOOL) $(MUVIEW_CURL)', Makefile +sed -e s,'INSTALL_APPS := .*','INSTALL_APPS := $(MUTOOL_EXE) $(MUVIEW_X11_CURL_EXE)', \ +-e '/^INSTALL_APPS +=/d' -i Makefile %build # do no set CFLAGS which is used by the build system itself! @@ -133,24 +111,25 @@ %suse_update_desktop_file mupdf +%if 0%{?suse_version} <= 1320 %post %desktop_database_post %postun %desktop_database_postun +%endif %files -%defattr(-,root,root) %doc CHANGES COPYING README docs/naming.txt docs/overview.txt %doc docs/progressive.txt docs/refcount.txt docs/examples/ %{_bindir}/mupdf %{_bindir}/mutool %{_datadir}/applications/mupdf.desktop %{_datadir}/pixmaps/mupdf.png -%{_mandir}/man1/mu*.1* +%{_mandir}/man1/mupdf.1%{ext_man} +%{_mandir}/man1/mutool.1%{ext_man} %files devel-static -%defattr(-,root,root,-) %{_includedir}/mupdf/ %{_libdir}/libmupdf.a %{_libdir}/libmupdfthird.a ++ fix-openjpeg-fl
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-08-12 19:33:06 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Sat Aug 12 19:33:06 2017 rev:28 rq:514182 version:1.10a Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-06-07 09:50:49.925613347 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-08-12 19:33:07.610771701 +0200 @@ -1,0 +2,8 @@ +Thu Aug 3 08:23:47 UTC 2017 - idon...@suse.com + +- Add CVE-2016-10221.patch, CVE-2016-8728.patch and + CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728, + CVE-2016-8729 and CVE-2017-7976 + bsc#1032140 bsc#1039850 bsc#1052029 + +--- New: CVE-2016-10221.patch CVE-2016-8728.patch CVE-2017-7976.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.UmlgcM/_old 2017-08-12 19:33:09.018574291 +0200 +++ /var/tmp/diff_new_pack.UmlgcM/_new 2017-08-12 19:33:09.022573730 +0200 @@ -37,6 +37,9 @@ Patch8: bsc1023760.patch # PATCH-FIX-UPSTREAM https://bugs.ghostscript.com/show_bug.cgi?id=697958 Patch9: reproducible.patch +Patch10:CVE-2016-8728.patch +Patch11:CVE-2017-7976.patch +Patch12:CVE-2016-10221.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -76,6 +79,9 @@ %patch7 -p1 %patch8 -p1 %patch9 -p1 +%patch10 -p1 +%patch11 -p1 +%patch12 -p1 pushd ./thirdparty/mujs %patch2 -p1 ++ CVE-2016-10221.patch ++ X-Git-Url: http://git.ghostscript.com/?p=mupdf.git;a=blobdiff_plain;f=source%2Fpdf%2Fpdf-layer.c;h=fc29c9d3e78eefa823cf768a9a37c476ba6f7c20;hp=3296b6c5ad953a1050899ae01021be05b3b08fa3;hb=2590fed7a355a421f062ebd4293df892800fa7ac;hpb=ffc4b61e6baf7a4d4e34c8901ae78ffd57da2530 diff --git a/source/pdf/pdf-layer.c b/source/pdf/pdf-layer.c index 3296b6c..fc29c9d 100644 --- a/source/pdf/pdf-layer.c +++ b/source/pdf/pdf-layer.c @@ -90,7 +90,14 @@ count_entries(fz_context *ctx, pdf_obj *obj) for (i = 0; i < len; i++) { pdf_obj *o = pdf_array_get(ctx, obj, i); - count += (pdf_is_array(ctx, o) ? count_entries(ctx, o) : 1); + if (pdf_mark_obj(ctx, o)) + continue; + fz_try(ctx) + count += (pdf_is_array(ctx, o) ? count_entries(ctx, o) : 1); + fz_always(ctx) + pdf_unmark_obj(ctx, o); + fz_catch(ctx) + fz_rethrow(ctx); } return count; } @@ -106,7 +113,16 @@ populate_ui(fz_context *ctx, pdf_ocg_descriptor *desc, pdf_ocg_ui *ui, pdf_obj * pdf_obj *o = pdf_array_get(ctx, order, i); if (pdf_is_array(ctx, o)) { - ui = populate_ui(ctx, desc, ui, o, depth+1, rbgroups, locked); + if (pdf_mark_obj(ctx, o)) + continue; + + fz_try(ctx) + ui = populate_ui(ctx, desc, ui, o, depth+1, rbgroups, locked); + fz_always(ctx) + pdf_unmark_obj(ctx, o); + fz_catch(ctx) + fz_rethrow(ctx); + continue; } ui->depth = depth; ++ CVE-2016-8728.patch ++ Index: mupdf-1.10a-source/source/fitz/draw-scale-simple.c === --- mupdf-1.10a-source.orig/source/fitz/draw-scale-simple.c +++ mupdf-1.10a-source/source/fitz/draw-scale-simple.c @@ -1294,7 +1294,7 @@ scale_single_row(unsigned char * restric tmp[j] = 128; if (weights->flip) { - dst += (weights->count-1)*n; + dst += (weights->count-1)*nf; for (i=weights->count; i > 0; i--) { min = *contrib++; Index: mupdf-1.10a-source/thirdparty/jbig2dec/jbig2_image.c === --- mupdf-1.10a-source.orig/thirdparty/jbig2dec/jbig2_image.c +++ mupdf-1.10a-source/thirdparty/jbig2dec/jbig2_image.c @@ -38,6 +38,13 @@ jbig2_image_new(Jbig2Ctx *ctx, int width int stride; int64_t check; +if (width == 0 || height == 0) { +jbig2_error(ctx, JBIG2_SEVERITY_FATAL, -1, +"zero width (%d) or height (%d) in jbig2_image_new", +width, height); +return NULL; +} + image = jbig2_new(ctx, Jbig2Image, 1); if (image == NULL) { jbig2_error(ctx,
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-06-07 09:50:48 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Wed Jun 7 09:50:48 2017 rev:27 rq:499527 version:1.10a Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-05-04 08:52:01.613086397 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-06-07 09:50:49.925613347 +0200 @@ -1,0 +2,6 @@ +Mon May 29 14:46:49 UTC 2017 - bwiedem...@suse.com + +- Add reproducible.patch to sort input files to make build reproducible + (boo#1041090) + +--- New: reproducible.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.4gR97m/_old 2017-06-07 09:50:52.505248787 +0200 +++ /var/tmp/diff_new_pack.4gR97m/_new 2017-06-07 09:50:52.509248221 +0200 @@ -35,6 +35,8 @@ Patch6: CVE-2017-5628.patch Patch7: CVE-2017-5896.patch Patch8: bsc1023760.patch +# PATCH-FIX-UPSTREAM https://bugs.ghostscript.com/show_bug.cgi?id=697958 +Patch9: reproducible.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -73,6 +75,7 @@ %patch1 -p1 %patch7 -p1 %patch8 -p1 +%patch9 -p1 pushd ./thirdparty/mujs %patch2 -p1 ++ reproducible.patch ++ Index: mupdf-1.10a-source/Makefile === --- mupdf-1.10a-source.orig/Makefile +++ mupdf-1.10a-source/Makefile @@ -83,13 +83,13 @@ PDF_HDR := include/mupdf/pdf.h $(wildcar SVG_HDR := include/mupdf/svg.h HTML_HDR := include/mupdf/html.h -FITZ_SRC := $(wildcard source/fitz/*.c) -PDF_SRC := $(wildcard source/pdf/*.c) -XPS_SRC := $(wildcard source/xps/*.c) -SVG_SRC := $(wildcard source/svg/*.c) -CBZ_SRC := $(wildcard source/cbz/*.c) -HTML_SRC := $(wildcard source/html/*.c) -GPRF_SRC := $(wildcard source/gprf/*.c) +FITZ_SRC := $(sort $(wildcard source/fitz/*.c)) +PDF_SRC := $(sort $(wildcard source/pdf/*.c)) +XPS_SRC := $(sort $(wildcard source/xps/*.c)) +SVG_SRC := $(sort $(wildcard source/svg/*.c)) +CBZ_SRC := $(sort $(wildcard source/cbz/*.c)) +HTML_SRC := $(sort $(wildcard source/html/*.c)) +GPRF_SRC := $(sort $(wildcard source/gprf/*.c)) FITZ_SRC_HDR := $(wildcard source/fitz/*.h) PDF_SRC_HDR := $(wildcard source/pdf/*.h) source/pdf/pdf-name-table.h @@ -116,11 +116,11 @@ $(GPRF_OBJ) : $(FITZ_HDR) $(GPRF_HDR) $( # --- Generated embedded font files --- -FONT_BIN_DROID := $(wildcard resources/fonts/droid/*.ttf) -FONT_BIN_NOTO := $(wildcard resources/fonts/noto/*.ttf) -FONT_BIN_HAN := $(wildcard resources/fonts/han/*.otf) -FONT_BIN_URW := $(wildcard resources/fonts/urw/*.cff) -FONT_BIN_SIL := $(wildcard resources/fonts/sil/*.cff) +FONT_BIN_DROID := $(sort $(wildcard resources/fonts/droid/*.ttf)) +FONT_BIN_NOTO := $(sort $(wildcard resources/fonts/noto/*.ttf)) +FONT_BIN_HAN := $(sort $(wildcard resources/fonts/han/*.otf)) +FONT_BIN_URW := $(sort $(wildcard resources/fonts/urw/*.cff)) +FONT_BIN_SIL := $(sort $(wildcard resources/fonts/sil/*.cff)) FONT_GEN_DROID := $(subst resources/fonts/droid/, $(GEN)/, $(addsuffix .c, $(basename $(FONT_BIN_DROID FONT_GEN_NOTO := $(subst resources/fonts/noto/, $(GEN)/, $(addsuffix .c, $(basename $(FONT_BIN_NOTO @@ -210,10 +210,10 @@ NAMEDUMP := $(OUT)/namedump CQUOTE := $(OUT)/cquote BIN2HEX := $(OUT)/bin2hex -CMAP_CNS_SRC := $(wildcard resources/cmaps/cns/*) -CMAP_GB_SRC := $(wildcard resources/cmaps/gb/*) -CMAP_JAPAN_SRC := $(wildcard resources/cmaps/japan/*) -CMAP_KOREA_SRC := $(wildcard resources/cmaps/korea/*) +CMAP_CNS_SRC := $(sort $(wildcard resources/cmaps/cns/*)) +CMAP_GB_SRC := $(sort $(wildcard resources/cmaps/gb/*)) +CMAP_JAPAN_SRC := $(sort $(wildcard resources/cmaps/japan/*)) +CMAP_KOREA_SRC := $(sort $(wildcard resources/cmaps/korea/*)) $(GEN)/gen_cmap_cns.h : $(CMAP_CNS_SRC) $(QUIET_GEN) $(CMAPDUMP) $@ $(CMAP_CNS_SRC)
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-05-04 08:52:00 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Thu May 4 08:52:00 2017 rev:26 rq:491698 version:1.10a Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-02-15 10:00:08.817090475 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-05-04 08:52:01.613086397 +0200 @@ -1,0 +2,5 @@ +Thu Apr 27 19:51:23 UTC 2017 - idon...@suse.com + +- mupdf is not a terminal app boo#1036637 + +--- Other differences: -- ++ mupdf.desktop ++ --- /var/tmp/diff_new_pack.VXQ2Dz/_old 2017-05-04 08:52:05.240574819 +0200 +++ /var/tmp/diff_new_pack.VXQ2Dz/_new 2017-05-04 08:52:05.240574819 +0200 @@ -5,7 +5,6 @@ Comment=PDF file viewer Exec=mupdf %f Icon=mupdf -Terminal=true Type=Application MimeType=application/pdf;application/x-pdf; Categories=Viewer;Graphics;
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-02-15 10:00:07 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-02-10 09:46:18.936852495 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-02-15 10:00:08.817090475 +0100 @@ -1,0 +2,12 @@ +Fri Feb 10 12:19:43 UTC 2017 - idon...@suse.com + +- Add bsc1023760.patch to fix writing svg output to stdout if no + output specified bsc#1023760 + +--- +Fri Feb 10 10:56:31 UTC 2017 - idon...@suse.com + +- Add CVE-2017-5896.patch to fix a heap overflow + CVE-2017-5896 bsc#1023761 bsc#1024679 + +--- New: CVE-2017-5896.patch bsc1023760.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.khftcZ/_old 2017-02-15 10:00:11.004782335 +0100 +++ /var/tmp/diff_new_pack.khftcZ/_new 2017-02-15 10:00:11.004782335 +0100 @@ -33,6 +33,8 @@ Patch4: CVE-2016-10141.patch Patch5: CVE-2017-5627.patch Patch6: CVE-2017-5628.patch +Patch7: CVE-2017-5896.patch +Patch8: bsc1023760.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -69,6 +71,8 @@ %prep %setup -q -n %{name}-%{version}-source %patch1 -p1 +%patch7 -p1 +%patch8 -p1 pushd ./thirdparty/mujs %patch2 -p1 ++ CVE-2017-5896.patch ++ X-Git-Url: http://git.ghostscript.com/?p=mupdf.git;a=blobdiff_plain;f=source%2Ffitz%2Fpixmap.c;h=f1291dc29d49ead44c10785fd014a0d995e45a91;hp=a8317127da7af6d39eb86fe3ca02cb4106a9b262;hb=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27;hpb=90fa6203ad032fe161d85a3e580941ce3d1216f0 diff --git a/source/fitz/pixmap.c b/source/fitz/pixmap.c index a831712..f1291dc 100644 --- a/source/fitz/pixmap.c +++ b/source/fitz/pixmap.c @@ -1104,6 +1104,7 @@ fz_subsample_pixmap_ARM(unsigned char *ptr, int w, int h, int f, int factor, "@STACK:r1,<9>,factor,n,fwd,back,back2,fwd2,divX,back4,fwd4,fwd3,divY,back5,divXY\n" "ldrr4, [r13,#4*22] @ r4 = divXY\n" "ldrr5, [r13,#4*11] @ for (nn = n; nn > 0; n--) { \n" + "ldrr8, [r13,#4*17] @ r8 = back4\n" "18:@ \n" "movr14,#0 @ r14= v = 0\n" "subr5, r5, r1, LSL #8 @ for (xx = x; xx > 0; x--) { \n" @@ -1120,7 +1121,7 @@ fz_subsample_pixmap_ARM(unsigned char *ptr, int w, int h, int f, int factor, "mulr14,r4, r14 @ r14= v *= divX\n" "movr14,r14,LSR #16 @ r14= v >>= 16 \n" "strb r14,[r9], #1@ *d++ = r14\n" - "subr0, r0, r8 @ s -= back2\n" + "subr0, r0, r8 @ s -= back4\n" "subs r5, r5, #1 @ n-- \n" "bgt18b @ } \n" "21:@ \n" @@ -1249,6 +1250,7 @@ fz_subsample_pixmap(fz_context *ctx, fz_pixmap *tile, int factor) x += f; if (x > 0) { + int back4 = x * n - 1; div = x * y; for (nn = n; nn > 0; nn--) { @@ -1263,7 +1265,7 @@ fz_subsample_pixmap(fz_context *ctx, fz_pixmap *tile, int factor) s -= back5; } *d++ = v / div; - s -= back2; + s -= back4; } } } ++ bsc1023760.patch ++ Index: mupdf-1.10a-source/source/tools/mudraw.c === --- mupdf-1.10a-source.orig/source/tools/mudraw.c +++ mupdf-1.10a-source/source/tools/mudraw.c @@ -720,7 +720,7 @@ static void dodrawpage(fz_context *ctx, char buf[512]; fz_output *out; - if (!strcmp(output, "-")) + if (!output || !strcmp(output, "-")) out = fz_stdout(ctx); else {
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-02-10 09:46:17 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2017-02-03 17:50:56.660360918 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-02-10 09:46:18.936852495 +0100 @@ -1,0 +2,6 @@ +Mon Feb 6 12:51:00 UTC 2017 - idon...@suse.com + +- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes + CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504 + +--- New: CVE-2017-5627.patch CVE-2017-5628.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.GzuBNa/_old 2017-02-10 09:46:21.744454779 +0100 +++ /var/tmp/diff_new_pack.GzuBNa/_new 2017-02-10 09:46:21.744454779 +0100 @@ -31,6 +31,8 @@ Patch2: CVE-2016-10132.patch Patch3: CVE-2016-10133.patch Patch4: CVE-2016-10141.patch +Patch5: CVE-2017-5627.patch +Patch6: CVE-2017-5628.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -72,6 +74,8 @@ %patch2 -p1 %patch3 -p1 %patch4 -p1 +%patch5 -p1 +%patch6 -p1 popd # do not use the inlined copies of build dpendencies except for mujs ++ CVE-2017-5627.patch ++ X-Git-Url: http://git.ghostscript.com/?p=mujs.git;a=blobdiff_plain;f=jsrun.c;h=ca7d5ad46ba2414f075280ee94121a88f0bcfde6;hp=782a6f9caa62d510377397b0c63c1407e70f6c95;hb=4006739a28367c708dea19aeb19b8a1a9326ce08;hpb=8f62ea10a0af68e56d5c00720523ebcba13c2e6a diff --git a/jsrun.c b/jsrun.c index 782a6f9..ca7d5ad 100644 --- a/jsrun.c +++ b/jsrun.c @@ -544,7 +544,7 @@ static void jsR_setproperty(js_State *J, js_Object *obj, const char *name) if (!strcmp(name, "length")) { double rawlen = jsV_tonumber(J, value); int newlen = jsV_numbertointeger(rawlen); - if (newlen != rawlen) + if (newlen != rawlen || newlen < 0) js_rangeerror(J, "array length"); jsV_resizearray(J, obj, newlen); return; ++ CVE-2017-5628.patch ++ >From 8f62ea10a0af68e56d5c00720523ebcba13c2e6a Mon Sep 17 00:00:00 2001 From: Tor Andersson Date: Tue, 24 Jan 2017 14:32:14 +0100 Subject: [PATCH] Fix 697496: Check NAN before accessing array in MakeDay(). --- jsdate.c | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/jsdate.c b/jsdate.c index 2b43edf..6efbb60 100644 --- a/jsdate.c +++ b/jsdate.c @@ -207,12 +207,17 @@ static double MakeDay(double y, double m, double date) }; double yd, md; + int im; y += floor(m / 12); m = pmod(m, 12); + im = (int)m; + if (im < 0 || im >= 12) + return NAN; + yd = floor(TimeFromYear(y) / msPerDay); - md = firstDayOfMonth[InLeapYear(y)][(int)m]; + md = firstDayOfMonth[InLeapYear(y)][im]; return yd + md + date - 1; } -- 2.9.1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2017-01-31 12:33:00 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2016-12-22 16:00:15.206914950 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2017-02-03 17:50:56.660360918 +0100 @@ -1,0 +2,7 @@ +Tue Jan 24 11:57:17 UTC 2017 - idon...@suse.com + +- Add CVE-2016-10132.patch, CVE-2016-10133.patch and + CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and + CVE-2016-10141 bsc#1019877 + +--- New: CVE-2016-10132.patch CVE-2016-10133.patch CVE-2016-10141.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.KbH2Jt/_old 2017-02-03 17:50:58.232139312 +0100 +++ /var/tmp/diff_new_pack.KbH2Jt/_new 2017-02-03 17:50:58.236138748 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -28,6 +28,9 @@ Source1:mupdf.desktop Source2:mupdf.png Patch1: fix-openjpeg-flags.patch +Patch2: CVE-2016-10132.patch +Patch3: CVE-2016-10133.patch +Patch4: CVE-2016-10141.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -65,6 +68,12 @@ %setup -q -n %{name}-%{version}-source %patch1 -p1 +pushd ./thirdparty/mujs +%patch2 -p1 +%patch3 -p1 +%patch4 -p1 +popd + # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) ++ CVE-2016-10132.patch ++ >From fd003eceda531e13fbdd1aeb6e9c73156496e569 Mon Sep 17 00:00:00 2001 From: Tor Andersson Date: Fri, 2 Dec 2016 14:56:20 -0500 Subject: [PATCH 1/1] Fix 697381: check allocation when compiling regular expressions. Also use allocator callback function. --- jsgc.c | 2 +- jsregexp.c | 2 +- jsstate.c | 6 -- regexp.c | 45 +++-- regexp.h | 7 +++ 5 files changed, 44 insertions(+), 18 deletions(-) diff --git a/jsgc.c b/jsgc.c index 4f7e7dc..f80111e 100644 --- a/jsgc.c +++ b/jsgc.c @@ -46,7 +46,7 @@ static void jsG_freeobject(js_State *J, js_Object *obj) jsG_freeproperty(J, obj->head); if (obj->type == JS_CREGEXP) { js_free(J, obj->u.r.source); - js_regfree(obj->u.r.prog); + js_regfreex(J->alloc, J->actx, obj->u.r.prog); } if (obj->type == JS_CITERATOR) jsG_freeiterator(J, obj->u.iter.head); diff --git a/jsregexp.c b/jsregexp.c index a2d5156..7b09c06 100644 --- a/jsregexp.c +++ b/jsregexp.c @@ -16,7 +16,7 @@ void js_newregexp(js_State *J, const char *pattern, int flags) if (flags & JS_REGEXP_I) opts |= REG_ICASE; if (flags & JS_REGEXP_M) opts |= REG_NEWLINE; - prog = js_regcomp(pattern, opts, &error); + prog = js_regcompx(J->alloc, J->actx, pattern, opts, &error); if (!prog) js_syntaxerror(J, "regular expression: %s", error); diff --git a/jsstate.c b/jsstate.c index 638cab3..fd5bcf6 100644 --- a/jsstate.c +++ b/jsstate.c @@ -9,12 +9,6 @@ static void *js_defaultalloc(void *actx, void *ptr, int size) { - if (size == 0) { - free(ptr); - return NULL; - } - if (!ptr) - return malloc((size_t)size); return realloc(ptr, (size_t)size); } diff --git a/regexp.c b/regexp.c index 9852be2..01c18a3 100644 --- a/regexp.c +++ b/regexp.c @@ -807,23 +807,31 @@ static void dumpprog(Reprog *prog) } #endif -Reprog *regcomp(const char *pattern, int cflags, const char **errorp) +Reprog *regcompx(void *(*alloc)(void *ctx, void *p, int n), void *ctx, + const char *pattern, int cflags, const char **errorp) { struct cstate g; Renode *node; Reinst *split, *jump; int i; - g.prog = malloc(sizeof (Reprog)); - g.pstart = g.pend = malloc(sizeof (Renode) * strlen(pattern) * 2); + g.pstart = NULL; + g.prog = NULL; if (setjmp(g.kaboom)) { if (errorp) *errorp = g.error; - free(g.pstart); - free(g.prog); + alloc(ctx, g.pstart, 0); + alloc(ctx, g.prog, 0); return NULL; } + g.prog = alloc(ctx, NULL, sizeof (Reprog)); + if (!g.prog) +
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2016-12-01 10:24:18 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2016-07-28 23:43:41.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2016-12-01 10:24:20.0 +0100 @@ -1,0 +2,26 @@ +Thu Nov 24 14:56:53 UTC 2016 - idon...@suse.com + +- Update to version 1.10 + * FictionBook (FB2) e-book support. + * Simple SVG parser (a small subset of SVG only). + * mutool convert: a new document conversion tool and interface. + * Multi-threaded rendering in mudraw. + * Updated base 14 fonts from URW. + * New CJK font with language specific variants. + * Hyperlink support in EPUB. + * Alpha channel is now optional in pixmaps. + * More aggressive purging of cached objects. + * Partial image decoding for lower memory use when banding. + * Reduced default set of built-in CMap tables to the minimum required. + * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time. + * Function level linking. + * Dropped pdf object generation numbers from public interfaces. + * Simplified PDF page, xobject, and annotation internals. + * Closing and freeing devices and writers are now separate steps. + * Improved PDF annotation editing interface (still a work in progress). + * Document writer interface. + * Banded image writer interface. +- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch, + both are fixed upstream. + +--- Old: CVE-2016-6265.patch mupdf-1.9a-source.tar.gz mupdf-fix-openjpeg2.patch New: mupdf-1.10-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.DZ0qF4/_old 2016-12-01 10:24:22.0 +0100 +++ /var/tmp/diff_new_pack.DZ0qF4/_new 2016-12-01 10:24:22.0 +0100 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.9a +Version:1.10 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ @@ -27,9 +27,6 @@ Source0:http://mupdf.com/downloads/mupdf-%{version}-source.tar.gz Source1:mupdf.desktop Source2:mupdf.png -# PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix build against openjpeg2 2.1 on openSUSE -Patch0: mupdf-fix-openjpeg2.patch -Patch1: CVE-2016-6265.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -69,9 +66,6 @@ # do not use the inlined copies of build dpendencies except for mujs rm -rf $(ls -d thirdparty/*/ | grep -v mujs) -%patch0 -p1 -%patch1 -p1 - mkdir docs/examples for src in docs/*.c; do if [ -r "$src" ]; then @@ -97,6 +91,8 @@ rm %{buildroot}%{_bindir}/mujstest rm %{buildroot}%{_bindir}/mupdf-x11 +rm %{buildroot}%{_bindir}/muraster + rm -rf %{buildroot}%{_datadir}/doc/ chmod 0644 %{buildroot}%{_includedir}/mupdf/*.h \ @@ -108,6 +104,7 @@ %{buildroot}%{_datadir}/applications/%{name}.desktop install -D -p -m 644 %{SOURCE2} \ %{buildroot}%{_datadir}/pixmaps/%{name}.png + %suse_update_desktop_file mupdf %post ++ mupdf-1.9a-source.tar.gz -> mupdf-1.10-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.9a-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.10-source.tar.gz differ: char 5, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2016-07-28 23:43:39 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2016-05-05 13:18:36.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2016-07-28 23:43:41.0 +0200 @@ -1,0 +2,5 @@ +Fri Jul 22 11:02:28 UTC 2016 - idon...@suse.com + +- Add CVE-2016-6265.patch to fix a use-after-free bsc#990195 + +--- New: CVE-2016-6265.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.DrIZB9/_old 2016-07-28 23:43:43.0 +0200 +++ /var/tmp/diff_new_pack.DrIZB9/_new 2016-07-28 23:43:43.0 +0200 @@ -29,6 +29,7 @@ Source2:mupdf.png # PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix build against openjpeg2 2.1 on openSUSE Patch0: mupdf-fix-openjpeg2.patch +Patch1: CVE-2016-6265.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -69,6 +70,7 @@ rm -rf $(ls -d thirdparty/*/ | grep -v mujs) %patch0 -p1 +%patch1 -p1 mkdir docs/examples for src in docs/*.c; do ++ CVE-2016-6265.patch ++ X-Git-Url: http://git.ghostscript.com/?p=mupdf.git;a=blobdiff_plain;f=source%2Fpdf%2Fpdf-xref.c;h=32225998178b7c4d465046ff5158a3796103d73d;hp=576c315de2a30cfd553652bfa82521edb07043c2;hb=fa1936405b6a84e5c9bb440912c23d532772f958;hpb=e98091d56afdf1cf6c9a017fa0bd35dd0b8968f0 diff --git a/source/pdf/pdf-xref.c b/source/pdf/pdf-xref.c index 576c315..3222599 100644 --- a/source/pdf/pdf-xref.c +++ b/source/pdf/pdf-xref.c @@ -1184,8 +1184,14 @@ pdf_load_xref(fz_context *ctx, pdf_document *doc, pdf_lexbuf *buf) fz_throw(ctx, FZ_ERROR_GENERIC, "object offset out of range: %d (%d 0 R)", (int)entry->ofs, i); } if (entry->type == 'o') - if (entry->ofs <= 0 || entry->ofs >= xref_len || pdf_get_xref_entry(ctx, doc, entry->ofs)->type != 'n') - fz_throw(ctx, FZ_ERROR_GENERIC, "invalid reference to an objstm that does not exist: %d (%d 0 R)", (int)entry->ofs, i); + { + /* Read this into a local variable here, because pdf_get_xref_entry +* may solidify the xref, hence invalidating "entry", meaning we +* need a stashed value for the throw. */ + fz_off_t ofs = entry->ofs; + if (ofs <= 0 || ofs >= xref_len || pdf_get_xref_entry(ctx, doc, ofs)->type != 'n') + fz_throw(ctx, FZ_ERROR_GENERIC, "invalid reference to an objstm that does not exist: %d (%d 0 R)", (int)ofs, i); + } } }
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2016-05-05 13:18:35 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2016-04-28 16:50:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2016-05-05 13:18:36.0 +0200 @@ -1,0 +2,6 @@ +Fri Apr 22 17:57:34 UTC 2016 - idon...@suse.com + +- Update to version 1.9a + * Fix a regression in text extraction. + +--- Old: mupdf-1.9-source.tar.gz New: mupdf-1.9a-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.fwcBNq/_old 2016-05-05 13:18:38.0 +0200 +++ /var/tmp/diff_new_pack.fwcBNq/_new 2016-05-05 13:18:38.0 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.9 +Version:1.9a Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ ++ mupdf-1.9-source.tar.gz -> mupdf-1.9a-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.9-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.9a-source.tar.gz differ: char 5, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2016-04-28 16:50:07 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2016-03-26 15:21:01.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2016-04-28 16:50:08.0 +0200 @@ -1,0 +2,18 @@ +Tue Apr 19 09:42:15 UTC 2016 - idon...@suse.com + +- Update to version 1.9 + * Bidirectional layout for Arabic and Hebrew scripts. + * Shaping complex scripts for EPUB text layout. + * Noto fallback fonts for EPUB layout. + * mutool create: +- Create new PDF files from scratch. +- Read an annotated content stream in a text file and write a + PDF file, automatically embedding font and image resources. + * mutool run: +- Run javascript scripts with MuPDF bindings. +- The interface is similar to the new Java interface. + * mutool draw: +- Optional multi-threaded operation (Windows and pthreads). +- Optional low memory mode (primarily for testing). + +--- Old: mupdf-1.8-source.tar.gz New: mupdf-1.9-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.grJobU/_old 2016-04-28 16:50:11.0 +0200 +++ /var/tmp/diff_new_pack.grJobU/_new 2016-04-28 16:50:11.0 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.8 +Version:1.9 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ @@ -38,6 +38,7 @@ BuildRequires: update-desktop-files BuildRequires: xorg-x11-devel BuildRequires: zlib-devel +BuildRequires: pkgconfig(harfbuzz) Requires: xdg-utils BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -127,5 +128,6 @@ %defattr(-,root,root,-) %{_includedir}/mupdf/ %{_libdir}/libmupdf.a +%{_libdir}/libmupdfthird.a %changelog ++ mupdf-1.8-source.tar.gz -> mupdf-1.9-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.8-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.9-source.tar.gz differ: char 5, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2016-03-26 15:21:00 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2015-11-24 22:30:42.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2016-03-26 15:21:01.0 +0100 @@ -1,0 +2,5 @@ +Mon Mar 21 18:57:22 UTC 2016 - idon...@suse.com + +- Set to best anti-alias mode (8) by default. + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.QfabBD/_old 2016-03-26 15:21:03.0 +0100 +++ /var/tmp/diff_new_pack.QfabBD/_new 2016-03-26 15:21:03.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -78,7 +78,7 @@ %build # do no set CFLAGS which is used by the build system itself! -export XCFLAGS="%{optflags} -fPIC -pthread" +export XCFLAGS="%{optflags} -DAA_BITS=8 -fPIC -pthread" make %{?_smp_mflags} \ build=release \ verbose=yes \
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2015-11-24 22:30:41 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2015-11-17 14:20:46.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2015-11-24 22:30:42.0 +0100 @@ -1,0 +2,6 @@ +Thu Nov 19 10:06:56 UTC 2015 - idon...@suse.com + +- Ship mupdf-x11-curl as default mupdf. Drop non-curl version. +- Drop mujstest as it seems to be a test utility. + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.nbfuIg/_old 2015-11-24 22:30:43.0 +0100 +++ /var/tmp/diff_new_pack.nbfuIg/_new 2015-11-24 22:30:43.0 +0100 @@ -85,13 +85,15 @@ NOCURL= \ CURL_CFLAGS="$(pkg-config --libs libcurl)" \ CURL_LIBS=" -pthread $(pkg-config --libs libcurl)" \ -HAVE_GLFW=no V=1 +HAVE_GLFW=no %install %make_install build=release prefix=%{_prefix} libdir=%{_libdir} -mv %{buildroot}%{_bindir}/mupdf-x11 %{buildroot}%{_bindir}/mupdf +mv %{buildroot}%{_bindir}/mupdf-x11-curl %{buildroot}%{_bindir}/mupdf +rm %{buildroot}%{_bindir}/mujstest +rm %{buildroot}%{_bindir}/mupdf-x11 rm -rf %{buildroot}%{_datadir}/doc/ chmod 0644 %{buildroot}%{_includedir}/mupdf/*.h \ @@ -116,9 +118,7 @@ %doc CHANGES COPYING README docs/naming.txt docs/overview.txt %doc docs/progressive.txt docs/refcount.txt docs/examples/ %{_bindir}/mupdf -%{_bindir}/mupdf-x11-curl %{_bindir}/mutool -%{_bindir}/mujstest %{_datadir}/applications/mupdf.desktop %{_datadir}/pixmaps/mupdf.png %{_mandir}/man1/mu*.1*
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2015-11-17 14:20:45 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2015-08-25 07:18:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2015-11-17 14:20:46.0 +0100 @@ -1,0 +2,13 @@ +Thu Nov 12 13:02:09 UTC 2015 - idon...@suse.com + +- Update to version 1.8 + * New URW fonts with greek and cyrillic. + * 64-bit file support. + * Updated FreeType to version 2.6.1. + * Various font substitution bug fixes. + * Fix setjmp/longjmp behaviour which could cause optimizing +compilers to misbehave. + * EPUB improvements: User style sheets, GIF images, Table of Contents, +CJK text, Page margins and many bug fixes. + +--- Old: mupdf-1.7a-source.tar.gz New: mupdf-1.8-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.bToC3q/_old 2015-11-17 14:20:48.0 +0100 +++ /var/tmp/diff_new_pack.bToC3q/_new 2015-11-17 14:20:48.0 +0100 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.7a +Version:1.8 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ @@ -80,13 +80,15 @@ # do no set CFLAGS which is used by the build system itself! export XCFLAGS="%{optflags} -fPIC -pthread" make %{?_smp_mflags} \ +build=release \ verbose=yes \ NOCURL= \ CURL_CFLAGS="$(pkg-config --libs libcurl)" \ -CURL_LIBS=" -pthread $(pkg-config --libs libcurl)" +CURL_LIBS=" -pthread $(pkg-config --libs libcurl)" \ +HAVE_GLFW=no V=1 %install -%make_install prefix=%{_prefix} libdir=%{_libdir} +%make_install build=release prefix=%{_prefix} libdir=%{_libdir} mv %{buildroot}%{_bindir}/mupdf-x11 %{buildroot}%{_bindir}/mupdf @@ -115,7 +117,6 @@ %doc docs/progressive.txt docs/refcount.txt docs/examples/ %{_bindir}/mupdf %{_bindir}/mupdf-x11-curl -%{_bindir}/mudraw %{_bindir}/mutool %{_bindir}/mujstest %{_datadir}/applications/mupdf.desktop ++ mupdf-1.7a-source.tar.gz -> mupdf-1.8-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.7a-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.8-source.tar.gz differ: char 5, line 1 ++ mupdf.png ++ Files /var/tmp/diff_new_pack.bToC3q/_old and /var/tmp/diff_new_pack.bToC3q/_new differ
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2015-08-25 07:18:17 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2015-04-22 01:15:35.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2015-08-25 07:18:20.0 +0200 @@ -1,0 +2,12 @@ +Tue Aug 18 08:47:41 UTC 2015 - idon...@suse.com + +- Update to version 1.7a + * Bug fixes: ++ Fixed bug that allocated too much memory when packing paths. ++ Fixed EPUB font scaling bug. ++ Fixed EPUB file type handling in viewers. ++ Improved tolerance for broken and unsupported CSS. + * New features: ++ Added -z option to mutool clean. + +--- Old: mupdf-1.7-source.tar.gz New: mupdf-1.7a-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.maJiTb/_old 2015-08-25 07:18:21.0 +0200 +++ /var/tmp/diff_new_pack.maJiTb/_new 2015-08-25 07:18:21.0 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.7 +Version:1.7a Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ ++ mupdf-1.7-source.tar.gz -> mupdf-1.7a-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.7-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.7a-source.tar.gz differ: char 5, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2015-04-22 01:15:33 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2015-01-09 01:11:31.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2015-04-22 01:15:35.0 +0200 @@ -1,0 +2,36 @@ +Sun Apr 19 13:55:51 UTC 2015 - aloi...@gmx.com + +- Update to version 1.7 + Headline changes: + * New 'Indie dev' licensing options - contact sa...@artifex.com +for more details. + * New HTML layout engine, and (DRM-free) EPUB viewer. + * Reduced memory usage - displaylists and internal PDF +representation take much less memory, reducing total memory +use on some files by over 60%. + Important API changes: + * Bound contexts have been removed; we now pass fz_contexts +explicitly. + * Reference counting of paths and text structures. + Features: + * Add mutool pages option. + * Tweaked rendering to prevent feature dropout in common cases. + * Viewer tweaks + * Better mouse wheel handling + * Shift-space support + * Mouse button control of presentation mode + Internal changes: + * Removal of bound contexts; fz_contexts now passed explicitly +everywhere. + * PDF filter revamp - simpler interface. + * Devices use derived structures rather than user pointer. + * Sparse PDF xrefs held in more compact form. + * New gsview viewer split out to its own repository. + Bug fixes: + * Improved handling of broken files. + * Fix BBoxes of Type 3 fonts. + * Updated fonts (including greek and cyrillic). + * Various memory leaks and crashes. + * And many more. + +--- Old: mupdf-1.6-source.tar.gz New: mupdf-1.7-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.VumvWo/_old 2015-04-22 01:15:36.0 +0200 +++ /var/tmp/diff_new_pack.VumvWo/_new 2015-04-22 01:15:36.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -18,7 +18,7 @@ Name: mupdf -Version:1.6 +Version:1.7 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ ++ mupdf-1.6-source.tar.gz -> mupdf-1.7-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.6-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.7-source.tar.gz differ: char 5, line 1
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2015-01-08 23:20:17 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2014-08-27 22:18:21.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2015-01-09 01:11:31.0 +0100 @@ -1,0 +2,18 @@ +Wed Dec 31 00:10:35 UTC 2014 - t...@gmx.com + +- update to version 1.6 + * Features: ++ Color detection device (mudraw -T). ++ Sepia mode full-page color tinting in X11 and win32 viewer + (keybinding: shift-C). ++ Re-implement printf and strtod due to portability issue with + locales and number formatting. ++ Add experimental 'gsview' project: a Windows Modern UI viewer. ++ Improve XML parser interface. + * Bug fixes: ++ CBZ page ordering ++ ZIP64 support ++ iOS and Android bug fixes ++ Miscellaneous minor fixes + +--- Old: mupdf-1.5-source.tar.gz New: mupdf-1.6-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.0PoH10/_old 2015-01-09 01:11:33.0 +0100 +++ /var/tmp/diff_new_pack.0PoH10/_new 2015-01-09 01:11:33.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -18,7 +18,7 @@ Name: mupdf -Version:1.5 +Version:1.6 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ ++ mupdf-1.5-source.tar.gz -> mupdf-1.6-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.5-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.6-source.tar.gz differ: char 5, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2014-08-27 22:18:13 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2014-06-16 21:55:37.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2014-08-27 22:18:21.0 +0200 @@ -1,0 +2,11 @@ +Tue Aug 26 07:03:44 UTC 2014 - g...@opensuse.org + +- update to version 1.5 + * This is a bugfix release: dozens of bugs have been found and +exterminated! + * A typo resulting in a potential stack overflow that could +corrupt files when saving edits to a PDF has been fixed. +Another bug which caused a significant slowdown has also been +fixed. + +--- Old: mupdf-1.4-source.tar.gz New: mupdf-1.5-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.li70Y8/_old 2014-08-27 22:18:23.0 +0200 +++ /var/tmp/diff_new_pack.li70Y8/_new 2014-08-27 22:18:23.0 +0200 @@ -18,7 +18,7 @@ Name: mupdf -Version:1.4 +Version:1.5 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ @@ -114,6 +114,7 @@ %doc CHANGES COPYING README docs/naming.txt docs/overview.txt %doc docs/progressive.txt docs/refcount.txt docs/examples/ %{_bindir}/mupdf +%{_bindir}/mupdf-x11-curl %{_bindir}/mudraw %{_bindir}/mutool %{_bindir}/mujstest ++ mupdf-1.4-source.tar.gz -> mupdf-1.5-source.tar.gz ++ /work/SRC/openSUSE:Factory/mupdf/mupdf-1.4-source.tar.gz /work/SRC/openSUSE:Factory/.mupdf.new/mupdf-1.5-source.tar.gz differ: char 5, line 1 ++ mupdf-fix-openjpeg2.patch ++ --- /var/tmp/diff_new_pack.li70Y8/_old 2014-08-27 22:18:23.0 +0200 +++ /var/tmp/diff_new_pack.li70Y8/_new 2014-08-27 22:18:23.0 +0200 @@ -1,23 +1,8 @@ -Index: mupdf-1.4-source/Makerules +Index: mupdf-1.5-source/source/fitz/load-jpx.c === mupdf-1.4-source.orig/Makerules -+++ mupdf-1.4-source/Makerules -@@ -71,8 +71,8 @@ SYS_X11_LIBS = $(shell pkg-config --libs - - SYS_FREETYPE_CFLAGS = $(shell pkg-config --cflags freetype2) - SYS_FREETYPE_LIBS = $(shell pkg-config --libs freetype2) --SYS_OPENJPEG_CFLAGS = $(shell pkg-config --cflags libopenjpeg1) --SYS_OPENJPEG_LIBS = $(shell pkg-config --libs libopenjpeg1) -+SYS_OPENJPEG_CFLAGS = $(shell pkg-config --cflags libopenjp2) -+SYS_OPENJPEG_LIBS = $(shell pkg-config --libs libopenjp2) - SYS_JBIG2DEC_LIBS = -ljbig2dec - SYS_JPEG_LIBS = -ljpeg - SYS_ZLIB_LIBS = -lz -Index: mupdf-1.4-source/source/fitz/load-jpx.c -=== mupdf-1.4-source.orig/source/fitz/load-jpx.c -+++ mupdf-1.4-source/source/fitz/load-jpx.c -@@ -117,7 +117,7 @@ fz_load_jpx(fz_context *ctx, unsigned ch +--- mupdf-1.5-source.orig/source/fitz/load-jpx.c mupdf-1.5-source/source/fitz/load-jpx.c +@@ -116,7 +116,7 @@ fz_load_jpx(fz_context *ctx, unsigned ch opj_stream_set_read_function(stream, fz_opj_stream_read); opj_stream_set_skip_function(stream, fz_opj_stream_skip); opj_stream_set_seek_function(stream, fz_opj_stream_seek); -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2014-06-16 21:55:35 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2014-02-18 14:45:21.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2014-06-16 21:55:37.0 +0200 @@ -1,0 +2,80 @@ +Fri May 30 18:06:41 UTC 2014 - g...@opensuse.org + +- fix source url + +--- +Fri May 30 09:16:58 UTC 2014 - g...@opensuse.org + +- update to version 1.4 + * Headline changes: +* CMYK rendering (mudraw PWG and PAM formats) +* TIFF viewer (with multi-page support). +* Added MuJS Javascript interpreter. + * MuJS is the default, V8 and JavaScriptCore are compile time +options. + * Javascript support has to be explicitly enabled with +pdf_enable_js. + * All viewers now have JavaScript enabled in the default +builds. + * Viewers: +* X11: Horizontal scroll wheel support. +* X11: Status bar display with warnings. +* Android: Digital signatures. +* iOS: Links, form filling, annotation editing, and javascript. +* iOS: Reflow mode. +* WinRT: Printing. +* WinRT: Improved zooming behaviour. + * Tools: +* mudraw: Banded rendering with -B /band-height/. +* mudraw: Select output format with -F /format/. +* mudraw: Write to stdout if you use '-' as the output file + name. +* mudraw: Add TGA output format. +* mudraw: Improved SVG output. +* mutool show: Write output to file instead of stdout with -o + /filename/. +* mutool clean: Clean content streams with -s option. + * Annotations: +* Improved font handling. +* Form fields. +* Free text. +* Sticky notes. + * Optimizations: +* glyph cache: Partial eviction. +* glyph cache: Run-length compressed glyphs. +* Smarter handling of subpixel metrics in text rendering. +* Optimized blitting functions. +* Optimized gradient mesh drawing. + * API changes and additions: +* fz_stream API reworked: replace "read" function with "next". +* "Rebind" functions to associate context bound objects with + another context: +fz_output, fz_stream, fz_device and fz_document. +* Introduce "document handlers" to detect and open different + file types. + * Must now call fz_register_document_handlers() to register +the defaults. + * May register your own handlers as well to work with + g fz_open_document. +* Hook to load system fonts: fz_install_load_system_font_funcs. +* PDF xref cache flushing functions (mark/clear/clear-to-mark). +* Add our own "printf" set of functions to format strings and + write to fz_output: + * Format %f as short as possible while preserving precision. + * Has %C for formatting a unicode character as UTF-8. + * Has %M to format fz_matrix. + * Has %R to format fz_rect. + * Has %q and %( to format strings with escaped characters. +* PDF process interface: allow PDF interpreter to do more than + just draw! + * Content stream state cleaning filter. + * Content stream rewriting filter. +* PDF digital signatures. +* Stroke states may now be stored on the stack. +* Improved fz_path internals. +* Gradient mesh drawing interface has been improved. +* Save files with incremental updates. +- drop obsolete mupdf-fix-array-overflow.patch +- switch to mujs instead of v8 + +--- Old: mupdf-1.3-source.tar.gz mupdf-fix-array-overflow.patch New: mupdf-1.4-source.tar.gz Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.pTmPxW/_old 2014-06-16 21:55:38.0 +0200 +++ /var/tmp/diff_new_pack.pTmPxW/_new 2014-06-16 21:55:38.0 +0200 @@ -18,19 +18,17 @@ Name: mupdf -Version:1.3 +Version:1.4 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ Group: Productivity/Office/Other Url:http://mupdf.com/ -Source0: http://mupdf.googlecode.com/files/mupdf-%{version}-source.tar.gz +Source0:http://mupdf.com/downloads/mupdf-%{version}-source.tar.gz Source1:mupdf.desktop Source2:mupdf.png -# PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix cflags, libs of openjpeg2 on openSUSE +# PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix build against openjpeg2 2.
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2014-02-18 14:45:20 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2014-01-06 17:45:42.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2014-02-18 14:45:21.0 +0100 @@ -1,0 +2,6 @@ +Fri Feb 14 10:04:23 UTC 2014 - g...@opensuse.org + +- add mupdf-fix-array-overflow.patch in order to fix a stack-based + buffer overflow in xps_parse_color() (bnc#863975) + +--- New: mupdf-fix-array-overflow.patch Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.Fmb1ZT/_old 2014-02-18 14:45:22.0 +0100 +++ /var/tmp/diff_new_pack.Fmb1ZT/_new 2014-02-18 14:45:22.0 +0100 @@ -29,6 +29,8 @@ Source2:mupdf.png # PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix cflags, libs of openjpeg2 on openSUSE Patch0: mupdf-fix-openjpeg2.patch +# PATCH-FIX-UPSTREAM mupdf-fix-array-overflow.patch http://bugs.ghostscript.com/show_bug.cgi?id=694957 bnc#863975 g...@opensuse.org -- Fix stack-based buffer overflow in xps_parse_color() +Patch1: mupdf-fix-array-overflow.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel @@ -73,6 +75,7 @@ rm -rf thirdparty %patch0 -p1 +%patch1 -p1 mkdir docs/examples for src in docs/*.c; do ++ mupdf-fix-array-overflow.patch ++ From: Simon Bünzli Date: Thu, 16 Jan 2014 21:04:51 + (+0100) Subject: Bug 694957: fix stack buffer overflow in xps_parse_color X-Git-Url: http://git.ghostscript.com/?p=mupdf.git;a=commitdiff_plain;h=60dabde18d7fe12b19da8b509bdfee9cc886aafc Bug 694957: fix stack buffer overflow in xps_parse_color xps_parse_color happily reads more than FZ_MAX_COLORS values out of a ContextColor array which overflows the passed in samples array. Limiting the number of allowed samples to FZ_MAX_COLORS and make sure to use that constant for all callers fixes the problem. Thanks to Jean-Jamil Khalifé for reporting and investigating the issue and providing a sample exploit file. --- diff --git a/source/xps/xps-common.c b/source/xps/xps-common.c index b780f42..32a30ba 100644 --- a/source/xps/xps-common.c +++ b/source/xps/xps-common.c @@ -89,7 +89,7 @@ xps_begin_opacity(xps_document *doc, const fz_matrix *ctm, const fz_rect *area, if (scb_color_att) { fz_colorspace *colorspace; - float samples[32]; + float samples[FZ_MAX_COLORS]; xps_parse_color(doc, base_uri, scb_color_att, &colorspace, samples); opacity = opacity * samples[0]; } @@ -208,12 +208,13 @@ void xps_parse_color(xps_document *doc, char *base_uri, char *string, fz_colorspace **csp, float *samples) { + fz_context *ctx = doc->ctx; char *p; int i, n; char buf[1024]; char *profile; - *csp = fz_device_rgb(doc->ctx); + *csp = fz_device_rgb(ctx); samples[0] = 1; samples[1] = 0; @@ -259,7 +260,7 @@ xps_parse_color(xps_document *doc, char *base_uri, char *string, profile = strchr(buf, ' '); if (!profile) { - fz_warn(doc->ctx, "cannot find icc profile uri in '%s'", string); + fz_warn(ctx, "cannot find icc profile uri in '%s'", string); return; } @@ -267,12 +268,17 @@ xps_parse_color(xps_document *doc, char *base_uri, char *string, p = strchr(profile, ' '); if (!p) { - fz_warn(doc->ctx, "cannot find component values in '%s'", profile); + fz_warn(ctx, "cannot find component values in '%s'", profile); return; } *p++ = 0; n = count_commas(p) + 1; + if (n > FZ_MAX_COLORS) + { + fz_warn(ctx, "ignoring %d color components (max %d allowed)", n - FZ_MAX_COLORS, FZ_MAX_COLORS); + n = FZ_MAX_COLORS; + } i = 0; while (i < n) { @@ -292,10 +298,10 @@ xps_parse_color(xps_document *doc, char *base_uri, char *string, /* TODO: load ICC profile */ switch (n) { - case 2: *csp = fz_device_gray(doc->ctx); br
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2014-01-06 17:45:38 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2013-06-28 17:49:05.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2014-01-06 17:45:42.0 +0100 @@ -1,0 +2,44 @@ +Sat Jan 4 20:08:44 UTC 2014 - g...@opensuse.org + +- update to version 1.3 + * Windows RT viewer app for MuPDF. + * Library changes to support progressive loading (display PDF +files as they download). Windows/Linux/MacOS viewer supports +this using curl. + * Incremental updates to PDF files are now (optionally) preserved +on loading/saving. + * Prototype support for checking PDF Digital Signatures. + * Initial annotation support (strike-out, underline, highlight + and ink) (library and android builds only). + * Fix operation on Android API level 8. + * Android redraw optimisations. + * Android app now supports Google Cloud Print. + * Android app translated into many languages. + * Android support for more architectures. + * Improvements to store (avoid collisions causing unnecessary +evictions). + * Windows apps use Unicode filenames now. + * PDF function handling improved; functions can now be passed to +devices without 'sampling'. + * PDF image handling improved; images can now be passed to + devices without decompression. + * Indexed images are no longer uncompressed at load time, saving +memory. + * Caching of rendered tiles for speed. + * Improved text analysis mode, capable of spotting +columns/indents, right-to-left text etc. + * HTML output mode now includes image output. + * PDF password encoding handling improved. + * MuPDF now opens Jpeg, Tiff and PNG files directly. + * Bug preventing OpenXPS files from being opened fixed. + * Initial (feature incomplete) SVG and PDF output devices. + * PWG raster (mono/grey/RGB) and PCL (mono) output devices. + * Various performance improvements (including tilings and mesh +based shadings). + * Revamped directory structure to reflect recent changes. + * Various potential SEGV, SoftMask and rendering fixes. + * Many potential crashes in Jpeg2000 and JBIG2 images fixed. +- restore desktop file and icon which were dropped by upstream +- build with support for progressive rendering via libcurl + +--- Old: mupdf-1.2-source.zip New: mupdf-1.3-source.tar.gz mupdf-fix-openjpeg2.patch mupdf.desktop mupdf.png Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.pQinpZ/_old 2014-01-06 17:45:43.0 +0100 +++ /var/tmp/diff_new_pack.pQinpZ/_new 2014-01-06 17:45:43.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -18,19 +18,23 @@ Name: mupdf -Version:1.2 +Version:1.3 Release:0 Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library License:AGPL-3.0+ Group: Productivity/Office/Other Url:http://mupdf.com/ -Source: http://mupdf.googlecode.com/files/mupdf-%{version}-source.zip +Source0: http://mupdf.googlecode.com/files/mupdf-%{version}-source.tar.gz +Source1:mupdf.desktop +Source2:mupdf.png +# PATCH-FIX-OPENSUSE mupdf-fix-openjpeg2.patch g...@opensuse.org -- Fix cflags, libs of openjpeg2 on openSUSE +Patch0: mupdf-fix-openjpeg2.patch BuildRequires: freetype-devel BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel +BuildRequires: libcurl-devel BuildRequires: libjpeg-devel -BuildRequires: openjpeg-devel -BuildRequires: unzip +BuildRequires: openjpeg2-devel BuildRequires: update-desktop-files BuildRequires: v8-devel BuildRequires: v8-private-headers-devel @@ -64,29 +68,43 @@ %prep %setup -q -n %{name}-%{version}-source + # do not use the inlined copies of build dpendencies rm -rf thirdparty +%patch0 -p1 + +mkdir docs/examples +for src in docs/*.c; do +if [ -r "$src" ]; then +ln -s "$src" "docs/examples/${src##*/}" +fi +done + %build # do no set CFLAGS which is used by the build system itself! -export XCFLAGS="%{optflags} -fPIC" -make %{?_smp_mflags} verbose=1 -ls -1 build/debug +export XCFLAGS="%{optflags} -fPIC -pthread" +make %{?_smp_mflags} \ +verbose
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2013-06-28 17:49:04 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2013-05-02 11:25:26.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2013-06-28 17:49:05.0 +0200 @@ -1,0 +2,6 @@ +Wed Jun 12 16:58:48 UTC 2013 - dval...@suse.com + +- set ExclusiveArch: %{ix86} x86_64 %{arm}. v8 is available only + for those architectures + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.1ePHoM/_old 2013-06-28 17:49:06.0 +0200 +++ /var/tmp/diff_new_pack.1ePHoM/_new 2013-06-28 17:49:06.0 +0200 @@ -38,6 +38,9 @@ BuildRequires: zlib-devel Requires: xdg-utils BuildRoot: %{_tmppath}/%{name}-%{version}-build +#set ExclusiveArch: %{ix86} x86_64 %{arm}. v8 is available only +# for those architectures +ExclusiveArch: %{ix86} x86_64 %{arm} %description MuPDF is a lightweight PDF and XPS viewer and parser/rendering library. -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2013-05-02 11:25:24 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2013-04-29 14:07:18.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2013-05-02 11:25:26.0 +0200 @@ -1,0 +2,4 @@ +Mon Apr 29 13:13:20 UTC 2013 - g...@opensuse.org + +- fix broken setting of CFLAGS introduced by the previous change +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.kVpOPY/_old 2013-05-02 11:25:28.0 +0200 +++ /var/tmp/diff_new_pack.kVpOPY/_new 2013-05-02 11:25:28.0 +0200 @@ -65,8 +65,8 @@ rm -rf thirdparty %build -export CFLAGS="%{optflags} -fPIC" -export XCFLAGS="%{optflags}" +# do no set CFLAGS which is used by the build system itself! +export XCFLAGS="%{optflags} -fPIC" make %{?_smp_mflags} verbose=1 ls -1 build/debug -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2013-04-29 14:07:16 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf", Maintainer is "" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2013-04-09 07:08:00.0 +0200 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2013-04-29 14:07:18.0 +0200 @@ -1,0 +2,6 @@ +Sun Apr 28 10:28:56 UTC 2013 - dap.darkn...@gmail.com + +- Fixed "ld: relocation R_X86_64_32 against `.rodata' can not + be used when making a shared object; recompile with -fPIC". + +--- Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.4zKxus/_old 2013-04-29 14:07:20.0 +0200 +++ /var/tmp/diff_new_pack.4zKxus/_new 2013-04-29 14:07:20.0 +0200 @@ -65,6 +65,7 @@ rm -rf thirdparty %build +export CFLAGS="%{optflags} -fPIC" export XCFLAGS="%{optflags}" make %{?_smp_mflags} verbose=1 ls -1 build/debug -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit mupdf for openSUSE:Factory
Hello community, here is the log from the commit of package mupdf for openSUSE:Factory checked in at 2013-04-09 07:07:58 Comparing /work/SRC/openSUSE:Factory/mupdf (Old) and /work/SRC/openSUSE:Factory/.mupdf.new (New) Package is "mupdf", Maintainer is "" Changes: --- /work/SRC/openSUSE:Factory/mupdf/mupdf.changes 2013-03-19 12:22:17.0 +0100 +++ /work/SRC/openSUSE:Factory/.mupdf.new/mupdf.changes 2013-04-09 07:08:00.0 +0200 @@ -1,0 +2,27 @@ +Fri Apr 5 17:31:25 UTC 2013 - g...@opensuse.org + +- update to version 1.2 + - Change licensing terms to GNU AGPL (from GNU GPL). + - Renamed 'mubusy' to 'mutool'. + - Add support for Javascript and forms handling. + - PDF 1.7 Extension Level 8 encryption implemented. + - Oversized and stroke text clipping implemented. + - Prototype transition support. + - Add fz_open_document_with_stream to allow non-file based +operation. + - Text searching API. + - Highlight and copy text selection API. + - Pass matrices and rectangles by reference for improved +performance. + - Change shadings to decompose at render times; massive memory +savings. + - Performance enhancements for color conversion and fax +decompression. + - ARM optimisations for color conversion and bitmap scaling. + - Bitmap subsampling stage introduced, with ARM optimisations. + - Type 3 fonts; glyphs are now handled as display lists. + - Scan converter performance improvements. + - Fix many SEGVs with out of spec files. + - Various rendering fixes. + +--- Old: mupdf-1.1-source.tar.gz New: mupdf-1.2-source.zip Other differences: -- ++ mupdf.spec ++ --- /var/tmp/diff_new_pack.bk3NQj/_old 2013-04-09 07:08:01.0 +0200 +++ /var/tmp/diff_new_pack.bk3NQj/_new 2013-04-09 07:08:01.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package mupdf # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2011 Guido Berhoerster. # # All modifications and additions to the file contributed by third parties @@ -16,26 +16,26 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + Name: mupdf -Version:1.1 +Version:1.2 Release:0 -License:GPL-3.0+ Summary:Lightweight PDF and XPS Viewer and Parser and Rendering Library -Url:http://mupdf.com/ +License:AGPL-3.0+ Group: Productivity/Office/Other -Source: http://mupdf.googlecode.com/files/mupdf-%{version}-source.tar.gz -BuildRequires: gcc-c++ +Url:http://mupdf.com/ +Source: http://mupdf.googlecode.com/files/mupdf-%{version}-source.zip BuildRequires: freetype-devel -BuildRequires: xorg-x11-devel -BuildRequires: openjpeg-devel -BuildRequires: libjpeg-devel -# workaround until jbig2dec-devel is fixed -BuildRequires: libjbig2dec0 +BuildRequires: gcc-c++ BuildRequires: jbig2dec-devel -BuildRequires: zlib-devel +BuildRequires: libjpeg-devel +BuildRequires: openjpeg-devel +BuildRequires: unzip +BuildRequires: update-desktop-files BuildRequires: v8-devel BuildRequires: v8-private-headers-devel -BuildRequires: update-desktop-files +BuildRequires: xorg-x11-devel +BuildRequires: zlib-devel Requires: xdg-utils BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -61,6 +61,8 @@ %prep %setup -q -n %{name}-%{version}-source +# do not use the inlined copies of build dpendencies +rm -rf thirdparty %build export XCFLAGS="%{optflags}" @@ -68,7 +70,9 @@ ls -1 build/debug %install -%make_install prefix=%{buildroot}%{_prefix} libdir=%{buildroot}%{_libdir} +%make_install prefix=%{_prefix} libdir=%{_libdir} +# mutool is missing from the install target +install -p -m 755 build/debug/mutool %{buildroot}%{_bindir}/mutool chmod 0644 %{buildroot}%{_includedir}/*.h \ %{buildroot}%{_libdir}/*.a \ @@ -93,7 +97,7 @@ %doc README COPYING %{_bindir}/mupdf %{_bindir}/mudraw -%{_bindir}/mubusy +%{_bindir}/mutool %{_datadir}/applications/mupdf.desktop %{_datadir}/pixmaps/mupdf.png %{_mandir}/man1/mu*.1* -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org