Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade PDFBox and PDFBoxGraphics2D #842

Open
wants to merge 1 commit into
base: open-dev-v1
Choose a base branch
from
Open

Upgrade PDFBox and PDFBoxGraphics2D #842

wants to merge 1 commit into from

Conversation

yosephatg
Copy link

PDFBox' <2.0.26 have CVEs, this bumps to the latest stable versions

@yosephatg
Upgrade PDFBox and PDFBoxGraphics2D
c93584a 
PDFBox' <2.0.26 have CVEs, this bumps to the latest stable versions
jochenberger
jochenberger reviewed Oct 11, 2022
View reviewed changes
openhtmltopdf-pdfbox/pom.xml
@@ -152,7 +152,7 @@
</build>

<properties>
<pdfbox.version>2.0.25</pdfbox.version>
<pdfbox.version>2.0.26</pdfbox.version>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe upgrade to 2.0.27

jochenberger
jochenberger reviewed Oct 11, 2022
View reviewed changes
openhtmltopdf-pdfbox/pom.xml
@@ -100,7 +100,7 @@
<dependency>
<groupId>de.rototor.pdfbox</groupId>
<artifactId>graphics2d</artifactId>
<version>0.34</version>
<version>0.38</version>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe upgrade to 0.41

This was referenced Oct 11, 2022
Open
Open
@rPraml
Copy link

rPraml commented Sep 18, 2023

Current PdfBox version is 2.0.29 and graphics2d 0.43

I've compiled the current 1.10 release against these versions. While compilation works fine (no API changes ;) ), I have 3 failing tests now:

TextVisualRegressionTest.testIssue472AddSemiTransparentWatermark:686
TextVisualRegressionTest.testIssue472CustomObjectDrawerMultiplePages:674
VisualRegressionTest.testMaliciousSvgInsecureMode:876

On the current open-dev-v1 branch, only the [ERROR] VisualRegressionTest.testMaliciousSvgInsecureMode:876
breaks.

@danfickle I see, the last contribution in this repo was 1. April 2022 and it seems that you are no longer active on Github.
I wanted to ask you kindly about the future of this project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jochenberger jochenberger jochenberger left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@yosephatg @rPraml @jochenberger