Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade PDFBox and PDFBoxGraphics2D #842

Open
wants to merge 1 commit into
base: open-dev-v1
Choose a base branch
from

Conversation

yosephatg
Copy link

PDFBox' <2.0.26 have CVEs, this bumps to the latest stable versions

PDFBox' <2.0.26 have CVEs, this bumps to the latest stable versions
@@ -152,7 +152,7 @@
</build>

<properties>
<pdfbox.version>2.0.25</pdfbox.version>
<pdfbox.version>2.0.26</pdfbox.version>

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe upgrade to 2.0.27

@@ -100,7 +100,7 @@
<dependency>
<groupId>de.rototor.pdfbox</groupId>
<artifactId>graphics2d</artifactId>
<version>0.34</version>
<version>0.38</version>

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe upgrade to 0.41

@rPraml
Copy link

rPraml commented Sep 18, 2023

Current PdfBox version is 2.0.29 and graphics2d 0.43

I've compiled the current 1.10 release against these versions. While compilation works fine (no API changes ;) ), I have 3 failing tests now:

TextVisualRegressionTest.testIssue472AddSemiTransparentWatermark:686
TextVisualRegressionTest.testIssue472CustomObjectDrawerMultiplePages:674
VisualRegressionTest.testMaliciousSvgInsecureMode:876

On the current open-dev-v1 branch, only the [ERROR] VisualRegressionTest.testMaliciousSvgInsecureMode:876
breaks.

@danfickle I see, the last contribution in this repo was 1. April 2022 and it seems that you are no longer active on Github.
I wanted to ask you kindly about the future of this project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants