From e1bd72b46c5c1b0809560db9e7c5c13946698892 Mon Sep 17 00:00:00 2001 From: Jay Berkenbilt Date: Fri, 18 Oct 2013 09:53:07 -0400 Subject: [PATCH] Prepare for 5.0.1 release --- ChangeLog | 2 ++ configure.ac | 2 +- libqpdf/QPDF.cc | 2 +- libqpdf/build.mk | 2 +- manual/qpdf-manual.xml | 43 ++++++++++++++++++++++++++++++++++++++++-- 5 files changed, 46 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 460cdd89..20ecd431 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,7 @@ 2013-10-18 Jay Berkenbilt + * 5.0.1: release + * Warn when -accessibility=n is specified with a modern encryption format (R > 3). Also, accept this flag (and ignore with warning) with 256-bit encryption. qpdf has always ignored the diff --git a/configure.ac b/configure.ac index 14f4a848..af54b6ce 100644 --- a/configure.ac +++ b/configure.ac @@ -2,7 +2,7 @@ dnl Process this file with autoconf to produce a configure script. dnl This config.in requires autoconf 2.5 or greater. AC_PREREQ([2.68]) -AC_INIT([qpdf],[5.0.0]) +AC_INIT([qpdf],[5.0.1]) AC_CONFIG_MACRO_DIR([m4]) AC_CONFIG_FILES([autoconf.mk]) diff --git a/libqpdf/QPDF.cc b/libqpdf/QPDF.cc index 26efaa78..cae7a7c2 100644 --- a/libqpdf/QPDF.cc +++ b/libqpdf/QPDF.cc @@ -19,7 +19,7 @@ #include #include -std::string QPDF::qpdf_version = "5.0.0"; +std::string QPDF::qpdf_version = "5.0.1"; static char const* EMPTY_PDF = "%PDF-1.3\n" diff --git a/libqpdf/build.mk b/libqpdf/build.mk index 9f3de30f..20781230 100644 --- a/libqpdf/build.mk +++ b/libqpdf/build.mk @@ -94,4 +94,4 @@ $(COBJS_libqpdf): libqpdf/$(OUTPUT_DIR)/%.$(LOBJ): libqpdf/%.c # * Otherwise, increment REVISION $(TARGETS_libqpdf): $(OBJS_libqpdf) - $(call makelib,$(OBJS_libqpdf),$@,$(LDFLAGS),$(LIBS),13,0,0) + $(call makelib,$(OBJS_libqpdf),$@,$(LDFLAGS),$(LIBS),13,1,0) diff --git a/manual/qpdf-manual.xml b/manual/qpdf-manual.xml index 631f759d..8d68db9d 100644 --- a/manual/qpdf-manual.xml +++ b/manual/qpdf-manual.xml @@ -5,8 +5,8 @@ - - + + ]> @@ -2640,6 +2640,45 @@ print "\n"; ChangeLog in the source distribution. + + 5.0.1: October 18, 2013 + + + + + Thanks to a detailed review by Florian Weimer and the Red Hat + Product Security Team, this release includes a number of + non-user-visible security hardening changes. Please see the + ChangeLog file in the source distribution for the complete + list. + + + + + When available, operating system-specific secure random number + generation is used for generating initialization vectors and + other random values used during encryption or file creation. + For the Windows build, this results in an added dependency on + Microsoft's cryptography API. To disable the OS-specific + cryptography and use the old version, pass the + option to + ./configure. + + + + + The qpdf command-line tool now issues a + warning when is specified + for newer encryption versions stating that the option is + ignored. qpdf, per the spec, has always ignored this flag, + but it previously did so silently. This warning is issued + only by the command-line tool, not by the library. The + library's handling of this flag is unchanged. + + + + + 5.0.0: July 10, 2013