diff --git a/SOURCES/qpdf-doc.patch b/SOURCES/qpdf-doc.patch old mode 100755 new mode 100644 diff --git a/SOURCES/qpdf-erase-tests-with-generated-object-stream.patch b/SOURCES/qpdf-erase-tests-with-generated-object-stream.patch old mode 100755 new mode 100644 diff --git a/SOURCES/qpdf-relax.patch b/SOURCES/qpdf-relax.patch index 9861daf..2693e43 100644 --- a/SOURCES/qpdf-relax.patch +++ b/SOURCES/qpdf-relax.patch @@ -1,69 +1,139 @@ -diff -up qpdf-11.7.0/libqpdf/QPDF.cc.relax qpdf-11.7.0/libqpdf/QPDF.cc ---- qpdf-11.7.0/libqpdf/QPDF.cc.relax 2023-12-24 13:36:07.000000000 +0100 -+++ qpdf-11.7.0/libqpdf/QPDF.cc 2024-01-08 15:17:27.020951639 +0100 -@@ -13,6 +13,10 @@ - #include - #include +diff --git a/libqpdf/QPDF.cc b/libqpdf/QPDF.cc +index 3eeea86..2a6923c 100644 +--- a/libqpdf/QPDF.cc ++++ b/libqpdf/QPDF.cc +@@ -11,6 +11,10 @@ + #include + #include +#ifdef USE_CRYPTO_GNUTLS +# include +#endif + - #include - #include - #include -@@ -250,14 +254,26 @@ void - QPDF::processFile(char const* filename, char const* password) + #include + #include + #include +@@ -262,7 +266,13 @@ QPDF::processFile(char const* filename, char const* password) { - auto* fi = new FileInputSource(filename); + FileInputSource* fi = new FileInputSource(); + fi->setFilename(filename); +#ifdef USE_CRYPTO_GNUTLS + GNUTLS_FIPS140_SET_LAX_MODE(); +#endif - processInputSource(std::shared_ptr(fi), password); + processInputSource(fi, password); +#ifdef USE_CRYPTO_GNUTLS + GNUTLS_FIPS140_SET_STRICT_MODE(); +#endif } void - QPDF::processFile(char const* description, FILE* filep, bool close_file, char const* password) +@@ -271,7 +281,13 @@ QPDF::processFile(char const* description, FILE* filep, { - auto* fi = new FileInputSource(description, filep, close_file); + FileInputSource* fi = new FileInputSource(); + fi->setFile(description, filep, close_file); +#ifdef USE_CRYPTO_GNUTLS + GNUTLS_FIPS140_SET_LAX_MODE(); +#endif - processInputSource(std::shared_ptr(fi), password); + processInputSource(fi, password); +#ifdef USE_CRYPTO_GNUTLS + GNUTLS_FIPS140_SET_STRICT_MODE(); +#endif } void -diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_encryption.cc ---- qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax 2023-12-24 13:36:07.000000000 +0100 -+++ qpdf-11.7.0/libqpdf/QPDF_encryption.cc 2024-01-08 15:19:52.303117277 +0100 -@@ -3,6 +3,8 @@ +diff --git a/libqpdf/QPDFWriter.cc b/libqpdf/QPDFWriter.cc +index 689fef7..57df1eb 100644 +--- a/libqpdf/QPDFWriter.cc ++++ b/libqpdf/QPDFWriter.cc +@@ -24,6 +24,10 @@ + #include + #include + ++#ifdef USE_CRYPTO_GNUTLS ++#include ++#endif ++ + QPDFWriter::Members::Members(QPDF& pdf) : + pdf(pdf), + filename("unspecified"), +@@ -321,6 +325,13 @@ void + QPDFWriter::setDeterministicID(bool val) + { + this->m->deterministic_id = val; ++ ++#ifdef USE_CRYPTO_GNUTLS ++ if (val) ++ GNUTLS_FIPS140_SET_LAX_MODE(); ++ else ++ GNUTLS_FIPS140_SET_STRICT_MODE(); ++#endif + } + + void +@@ -342,6 +353,13 @@ void + QPDFWriter::setPreserveEncryption(bool val) + { + this->m->preserve_encryption = val; ++ ++#ifdef USE_CRYPTO_GNUTLS ++ if (val) ++ GNUTLS_FIPS140_SET_STRICT_MODE(); ++ else ++ GNUTLS_FIPS140_SET_LAX_MODE(); ++#endif + } + + void +@@ -2301,12 +2319,23 @@ QPDFWriter::generateID() + } + } + ++#ifdef USE_CRYPTO_GNUTLS ++ unsigned oldmode = gnutls_fips140_mode_enabled(); ++ ++ gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD); ++#endif ++ + MD5 m; + m.encodeString(seed.c_str()); + MD5::Digest digest; + m.digest(digest); + result = std::string(reinterpret_cast(digest), + sizeof(MD5::Digest)); ++ ++#ifdef USE_CRYPTO_GNUTLS ++ gnutls_fips140_set_mode(static_cast(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD); ++#endif ++ + } - #include + // If /ID already exists, follow the spec: use the original first +diff --git a/libqpdf/QPDF_encryption.cc b/libqpdf/QPDF_encryption.cc +index 2ff48df..ce6fb31 100644 +--- a/libqpdf/QPDF_encryption.cc ++++ b/libqpdf/QPDF_encryption.cc +@@ -1,6 +1,8 @@ + // This file implements methods from the QPDF class that involve + // encryption. +#include + #include #include -@@ -19,6 +21,10 @@ - #include - #include +@@ -18,6 +20,10 @@ + #include + #include +#ifdef USE_CRYPTO_GNUTLS +# include +#endif + static unsigned char const padding_string[] = { - 0x28, 0xbf, 0x4e, 0x5e, 0x4e, 0x75, 0x8a, 0x41, 0x64, 0x00, 0x4e, 0x56, 0xff, 0xfa, 0x01, 0x08, - 0x2e, 0x2e, 0x00, 0xb6, 0xd0, 0x68, 0x3e, 0x80, 0x2f, 0x0c, 0xa9, 0xfe, 0x64, 0x53, 0x69, 0x7a}; -@@ -349,10 +355,21 @@ QPDF::compute_data_key( - result += "sAlT"; + 0x28, 0xbf, 0x4e, 0x5e, 0x4e, 0x75, 0x8a, 0x41, + 0x64, 0x00, 0x4e, 0x56, 0xff, 0xfa, 0x01, 0x08, +@@ -380,10 +386,21 @@ QPDF::compute_data_key(std::string const& encryption_key, + result += "sAlT"; } +#ifdef USE_CRYPTO_GNUTLS @@ -81,12 +151,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e + gnutls_fips140_set_mode(static_cast(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD); +#endif + - return {reinterpret_cast(digest), std::min(result.length(), toS(16))}; + return std::string(reinterpret_cast(digest), + std::min(result.length(), toS(16))); } - -@@ -976,6 +993,12 @@ QPDF::getKeyForObject( +@@ -1150,6 +1167,12 @@ QPDF::getKeyForObject( void - QPDF::decryptString(std::string& str, QPDFObjGen const& og) + QPDF::decryptString(std::string& str, int objid, int generation) { +#ifdef USE_CRYPTO_GNUTLS + unsigned oldmode = gnutls_fips140_mode_enabled(); @@ -94,12 +164,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e + gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD); +#endif + - if (!og.isIndirect()) { - return; - } -@@ -1036,6 +1059,10 @@ QPDF::decryptString(std::string& str, QP - } catch (std::runtime_error& e) { - throw damagedPDF("error decrypting string for object " + og.unparse() + ": " + e.what()); + if (objid == 0) + { + return; +@@ -1230,6 +1253,10 @@ QPDF::decryptString(std::string& str, int objid, int generation) + QUtil::int_to_string(objid) + " " + + QUtil::int_to_string(generation) + ": " + e.what()); } + +#ifdef USE_CRYPTO_GNUTLS @@ -107,10 +177,10 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e +#endif } - // Prepend a decryption pipeline to 'pipeline'. The decryption pipeline (returned as -@@ -1051,6 +1078,12 @@ QPDF::decryptStream( - QPDFObjectHandle& stream_dict, - std::unique_ptr& decrypt_pipeline) + void +@@ -1240,6 +1267,12 @@ QPDF::decryptStream(PointerHolder encp, + QPDFObjectHandle& stream_dict, + std::vector >& heap) { +#ifdef USE_CRYPTO_GNUTLS + unsigned oldmode = gnutls_fips140_mode_enabled(); @@ -119,12 +189,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e +#endif + std::string type; - if (stream_dict.getKey("/Type").isName()) { - type = stream_dict.getKey("/Type").getName(); -@@ -1151,6 +1184,10 @@ QPDF::decryptStream( - toI(key.length())); + if (stream_dict.getKey("/Type").isName()) + { +@@ -1361,6 +1394,10 @@ QPDF::decryptStream(PointerHolder encp, + toI(key.length())); } - pipeline = decrypt_pipeline.get(); + heap.push_back(pipeline); + +#ifdef USE_CRYPTO_GNUTLS + gnutls_fips140_set_mode(static_cast(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD); @@ -132,67 +202,3 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e } void -diff -up qpdf-11.7.0/libqpdf/QPDFWriter.cc.relax qpdf-11.7.0/libqpdf/QPDFWriter.cc ---- qpdf-11.7.0/libqpdf/QPDFWriter.cc.relax 2023-12-24 13:36:07.000000000 +0100 -+++ qpdf-11.7.0/libqpdf/QPDFWriter.cc 2024-01-08 15:17:27.022951614 +0100 -@@ -26,6 +26,10 @@ - #include - #include - -+#ifdef USE_CRYPTO_GNUTLS -+#include -+#endif -+ - QPDFWriter::ProgressReporter::~ProgressReporter() // NOLINT (modernize-use-equals-default) - { - // Must be explicit and not inline -- see QPDF_DLL_CLASS in README-maintainer -@@ -287,6 +291,13 @@ void - QPDFWriter::setDeterministicID(bool val) - { - m->deterministic_id = val; -+ -+#ifdef USE_CRYPTO_GNUTLS -+ if (val) -+ GNUTLS_FIPS140_SET_LAX_MODE(); -+ else -+ GNUTLS_FIPS140_SET_STRICT_MODE(); -+#endif - } - - void -@@ -307,6 +318,13 @@ void - QPDFWriter::setPreserveEncryption(bool val) - { - m->preserve_encryption = val; -+ -+#ifdef USE_CRYPTO_GNUTLS -+ if (val) -+ GNUTLS_FIPS140_SET_STRICT_MODE(); -+ else -+ GNUTLS_FIPS140_SET_LAX_MODE(); -+#endif - } - - void -@@ -1890,11 +1908,21 @@ QPDFWriter::generateID() - } - } - -+#ifdef USE_CRYPTO_GNUTLS -+ unsigned oldmode = gnutls_fips140_mode_enabled(); -+ -+ gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD); -+#endif -+ - MD5 m; - m.encodeString(seed.c_str()); - MD5::Digest digest; - m.digest(digest); - result = std::string(reinterpret_cast(digest), sizeof(MD5::Digest)); -+ -+#ifdef USE_CRYPTO_GNUTLS -+ gnutls_fips140_set_mode(static_cast(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD); -+#endif - } - - // If /ID already exists, follow the spec: use the original first word and generate a new second diff --git a/SOURCES/qpdf-s390x-disable-streamtest.patch b/SOURCES/qpdf-s390x-disable-streamtest.patch old mode 100755 new mode 100644 diff --git a/SPECS/qpdf.spec b/SPECS/qpdf.spec index 0b44ecc..b1199b2 100644 --- a/SPECS/qpdf.spec +++ b/SPECS/qpdf.spec @@ -1,29 +1,34 @@ Summary: Command-line tools and library for transforming PDF files Name: qpdf -Version: 11.9.0 -Release: 1%{?dist} -# MIT: e.g. libqpdf/sha2.c, but those are not compiled in (GNUTLS is used) +Version: 10.3.1 +Release: 7%{?dist} +# MIT: e.g. libqpdf/sha2.c # upstream uses ASL 2.0 now, but he allowed other to distribute qpdf under # old license (see README) -License: Apache-2.0 OR Artistic-2.0 -URL: https://qpdf.sourceforge.io/ -Source0: https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.gz -Source1: https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}-doc.zip - +License: (Artistic 2.0 or ASL 2.0) and MIT +URL: http://qpdf.sourceforge.net/ +Source0: http://downloads.sourceforge.net/sourceforge/qpdf/qpdf-%{version}.tar.gz + +Patch0: qpdf-doc.patch +# zlib has optimalization for aarch64 now, which gives different output after +# compression - patch erases 3 tests with generated object stream which were failing +Patch1: qpdf-erase-tests-with-generated-object-stream.patch # make qpdf working under FIPS, downstream patch -Patch1: qpdf-relax.patch - +Patch2: qpdf-relax.patch +# 1950033 - Possible changes in zlib output causes FTBFS for qpdf +Patch3: qpdf-s390x-disable-streamtest.patch # gcc and gcc-c++ are no longer in buildroot by default # gcc is needed for qpdf-ctest.c BuildRequires: gcc # gcc-c++ is need for everything except for qpdf-ctest BuildRequires: gcc-c++ -# uses cmake -BuildRequires: cmake +# uses make +BuildRequires: make BuildRequires: zlib-devel BuildRequires: libjpeg-turbo-devel +BuildRequires: pcre-devel # for gnutls crypto BuildRequires: gnutls-devel @@ -38,7 +43,6 @@ BuildRequires: perl(Cwd) BuildRequires: perl(Digest::MD5) BuildRequires: perl(Digest::SHA) BuildRequires: perl(File::Basename) -BuildRequires: perl(File::Compare) BuildRequires: perl(File::Copy) BuildRequires: perl(File::Find) BuildRequires: perl(File::Spec) @@ -51,6 +55,11 @@ BuildRequires: perl(strict) # perl(Term::ANSIColor) - not needed for tests # perl(Term::ReadKey) - not needed for tests +# for autoreconf +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: libtool + Requires: %{name}-libs%{?_isa} = %{version}-%{release} %package libs @@ -63,7 +72,6 @@ Requires: %{name}-libs%{?_isa} = %{version}-%{release} %package doc Summary: QPDF Manual BuildArch: noarch -BuildRequires: unzip Requires: %{name}-libs = %{version}-%{release} %description @@ -88,34 +96,37 @@ QPDF Manual %prep %setup -q -%patch -P 1 -p1 -b .relax - -# unpack zip file with manual -unzip %{SOURCE1} - +# fix 'complete manual location' note in man pages +%patch0 -p1 -b .doc +%ifarch aarch64 +%patch1 -p1 -b .erase-tests-with-generated-object-stream +%endif +%patch2 -p1 -b .relax +%ifarch s390x +%patch3 -p1 -b .s390x-disable-streamtest +%endif %build -%cmake -DBUILD_STATIC_LIBS=0 \ - -DREQUIRE_CRYPTO_GNUTLS=1 \ - -DUSE_IMPLICIT_CRYPTO=0 \ - -DSHOW_FAILED_TEST_OUTPUT=1 \ - -DINSTALL_CMAKE_PACKAGE=0 +# work-around check-rpaths errors +autoreconf --verbose --force --install +# automake files needed to be regenerated in 8.4.0 - check if this can be removed +# in the next qpdf release +./autogen.sh -%cmake_build +%configure --disable-static \ + --enable-crypto-gnutls \ + --disable-implicit-crypto \ + --enable-show-failed-test-output -%install -%cmake_install +%make_build -install -m 0644 %{name}-%{version}-doc/%{name}-manual.pdf %{buildroot}/%{_pkgdocdir}/%{name}-manual.pdf +%install +%make_install -# install bash/zsh completions -mkdir -p %{buildroot}%{bash_completions_dir} -mkdir -p %{buildroot}%{zsh_completions_dir} -install -m 0644 completions/bash/qpdf %{buildroot}%{bash_completions_dir}/qpdf -install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf +rm -f %{buildroot}%{_libdir}/libqpdf.la %check -%ctest +make check %ldconfig_scriptlets libs @@ -124,16 +135,12 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf %{_bindir}/qpdf %{_bindir}/zlib-flate %{_mandir}/man1/* -%dir %{bash_completions_dir} -%{bash_completions_dir}/qpdf -%dir %{zsh_completions_dir} -%{zsh_completions_dir}/_qpdf %files libs -%doc README.md TODO.md ChangeLog -%license Artistic-2.0 LICENSE.txt NOTICE.md -%{_libdir}/libqpdf.so.29 -%{_libdir}/libqpdf.so.29.9.0 +%doc README.md TODO ChangeLog +%license Artistic-2.0 +%{_libdir}/libqpdf.so.28 +%{_libdir}/libqpdf.so.28.3.1 %files devel %doc examples/*.cc examples/*.c @@ -146,109 +153,24 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf %changelog -* Fri Mar 01 2024 Zdenek Dohnal - 11.9.0-1 -- 2267205 - TRIAGE CVE-2024-24246 qpdf - Heap Buffer Overflow vulnerability in qpdf [fedora-all] -- 2265854 - qpdf-11.9.0 is available - -* Fri Jan 26 2024 Fedora Release Engineering - 11.8.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Mon Jan 22 2024 Fedora Release Engineering - 11.8.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Tue Jan 09 2024 Zdenek Dohnal - 11.8.0-1 -- 2257313 - qpdf-11.8.0 is available - -* Mon Jan 08 2024 Zdenek Dohnal - 11.7.0-1 -- 2255755 - qpdf-11.7.0 is available - -* Tue Dec 19 2023 Zdenek Dohnal - 11.6.4-2 -- 2254778 - remove the tests which fail with zlib-ng-compat for now - -* Mon Dec 18 2023 Zdenek Dohnal - 11.6.4-1 -- 2253901 - qpdf-11.6.4 is available - -* Thu Nov 02 2023 Zdenek Dohnal - 11.6.3-1 -- 2244319 - qpdf-11.6.3 is available - -* Mon Oct 09 2023 Zdenek Dohnal - 11.6.2-1 -- 2242670 - qpdf-11.6.2 is available - -* Tue Sep 12 2023 Zdenek Dohnal - 11.6.1-1 -- 2237125 - qpdf-11.6.1 is available - -* Wed Jul 26 2023 Zdenek Dohnal - 11.5.0-1 -- 2221506 - qpdf-11.5.0 is available - -* Fri Jul 21 2023 Fedora Release Engineering - 11.4.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - -* Mon May 22 2023 Zdenek Dohnal - 11.4.0-1 -- 2208892 - qpdf-11.4.0 is available - -* Mon Mar 27 2023 Zdenek Dohnal - 11.3.0-2 -- 2181519 - qpdf bash and zsh completion files are missing - -* Thu Mar 02 2023 Zdenek Dohnal - 11.3.0-1 -- 2173354 - qpdf-11.3.0 is available - -* Fri Jan 20 2023 Fedora Release Engineering - 11.2.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - -* Tue Nov 22 2022 Zdenek Dohnal - 11.2.0-1 -- 2144359 - qpdf-11.2.0 is available - -* Thu Oct 13 2022 Zdenek Dohnal - 11.1.1-1 -- 2125823 - qpdf-11.1.1 is available - -* Thu Sep 22 2022 Zdenek Dohnal - 11.1.0-1 -- 2125823 - qpdf-11.1.0 is available, move to cmake - -* Thu Sep 22 2022 Zdenek Dohnal - 10.6.3-5 -- use `grep -E` in test suite (bz2127957) - -* Mon Jul 25 2022 Zdenek Dohnal - 10.6.3-4 -- qpdf doesn't depend on pcre since 7.0b1 - -* Fri Jul 22 2022 Fedora Release Engineering - 10.6.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - -* Thu Jul 14 2022 Zdenek Dohnal - 10.6.3-2 -- 2107240 - FIPS breaks pdftopdf and bannertopdf - -* Fri Mar 18 2022 Zdenek Dohnal - 10.6.3-1 -- 2063429 - qpdf-10.6.3 is available - -* Thu Feb 17 2022 Zdenek Dohnal - 10.6.2-1 -- 2053647 - qpdf-10.6.2 is available - -* Mon Feb 14 2022 Zdenek Dohnal - 10.6.1-1 -- 2053647 - qpdf-10.6.1 is available - -* Thu Feb 10 2022 Zdenek Dohnal - 10.6.0-1 -- 2052569 - qpdf-10.6.0 is available - -* Fri Jan 21 2022 Fedora Release Engineering - 10.5.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Wed Jan 05 2022 Zdenek Dohnal - 10.5.0-2 -- add qpdf-manual - now it is in a different archive +* Wed Jan 04 2023 Zdenek Dohnal - 10.3.1-7 +- 2157765 - Ship qpdf-devel in CRB -* Mon Jan 03 2022 Zdenek Dohnal - 10.5.0-1 -- 2034671 - qpdf-10.5.0 is available +* Fri Jul 15 2022 Zdenek Dohnal - 10.3.1-6 +- 2106940 - FIPS breaks pdftopdf and bannertopdf -* Mon Dec 06 2021 Zdenek Dohnal - 10.4.0-1 -- 2023979 - qpdf-10.4.0 is available +* Wed Jun 29 2022 Zdenek Dohnal - 10.3.1-5 +- 2095993 - Move qpdf to CRB repository -* Fri Jul 23 2021 Fedora Release Engineering - 10.3.2-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild +* Tue Aug 10 2021 Mohan Boddu - 10.3.1-4 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 -* Thu May 20 2021 Zdenek Dohnal - 10.3.2-1 -- 1958536 - qpdf-10.3.2 is available +* Tue Apr 20 2021 Zdenek Dohnal - 10.3.1-3 +- 1950033 - Possible changes in zlib output causes FTBFS for qpdf -* Mon Apr 19 2021 Zdenek Dohnal - 10.3.1-2 -- aarch64 specific patches were removed from zlib, so no need for ours -- zlib got downstream patches on s390x, we need to patch qpdf test suite for it +* Fri Apr 16 2021 Mohan Boddu - 10.3.1-2 +- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Fri Mar 12 2021 Zdenek Dohnal - 10.3.1-1 - 1937988 - qpdf-10.3.1 is available