update to version 11.9.0

Signed-off-by: Toshaan Bharvani <toshaan@powerel.org>
6 months ago · ab27dd02e3
5 changed files with 179 additions and 251 deletions
--- a/SOURCES/qpdf-doc.patch
+++ b/SOURCES/qpdf-doc.patch
--- a/SOURCES/qpdf-erase-tests-with-generated-object-stream.patch
+++ b/SOURCES/qpdf-erase-tests-with-generated-object-stream.patch
--- a/SOURCES/qpdf-relax.patch
+++ b/SOURCES/qpdf-relax.patch
@ -1,68 +1,138 @@
				@@ -1,68 +1,138 @@
-diff -up qpdf-11.7.0/libqpdf/QPDF.cc.relax qpdf-11.7.0/libqpdf/QPDF.cc
--- qpdf-11.7.0/libqpdf/QPDF.cc.relax	2023-12-24 13:36:07.000000000 +0100
-+++ qpdf-11.7.0/libqpdf/QPDF.cc	2024-01-08 15:17:27.020951639 +0100
-@@ -13,6 +13,10 @@
- #include <sstream>
- #include <vector>
+diff --git a/libqpdf/QPDF.cc b/libqpdf/QPDF.cc
+index 3eeea86..2a6923c 100644
+--- a/libqpdf/QPDF.cc
+++ b/libqpdf/QPDF.cc
+@@ -11,6 +11,10 @@
+ #include <string.h>
+ #include <memory.h>
 
 +#ifdef USE_CRYPTO_GNUTLS
 +# include <gnutls/crypto.h>
 +#endif
 +
- #include <qpdf/BufferInputSource.hh>
- #include <qpdf/FileInputSource.hh>
- #include <qpdf/OffsetInputSource.hh>
-@@ -250,14 +254,26 @@ void
- QPDF::processFile(char const* filename, char const* password)
+ #include <qpdf/QTC.hh>
+ #include <qpdf/QUtil.hh>
+ #include <qpdf/Pipeline.hh>
+@@ -262,7 +266,13 @@ QPDF::processFile(char const* filename, char const* password)
 {
-     auto* fi = new FileInputSource(filename);
+     FileInputSource* fi = new FileInputSource();
+     fi->setFilename(filename);
 +#ifdef USE_CRYPTO_GNUTLS
 +    GNUTLS_FIPS140_SET_LAX_MODE();
 +#endif
-     processInputSource(std::shared_ptr<InputSource>(fi), password);
+     processInputSource(fi, password);
 +#ifdef USE_CRYPTO_GNUTLS
 +    GNUTLS_FIPS140_SET_STRICT_MODE();
 +#endif
 }
 
 void
- QPDF::processFile(char const* description, FILE* filep, bool close_file, char const* password)
+@@ -271,7 +281,13 @@ QPDF::processFile(char const* description, FILE* filep,
 {
-     auto* fi = new FileInputSource(description, filep, close_file);
+     FileInputSource* fi = new FileInputSource();
+     fi->setFile(description, filep, close_file);
 +#ifdef USE_CRYPTO_GNUTLS
 +    GNUTLS_FIPS140_SET_LAX_MODE();
 +#endif
-     processInputSource(std::shared_ptr<InputSource>(fi), password);
+     processInputSource(fi, password);
 +#ifdef USE_CRYPTO_GNUTLS
 +    GNUTLS_FIPS140_SET_STRICT_MODE();
 +#endif
 }
 
 void
-diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_encryption.cc
--- qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax	2023-12-24 13:36:07.000000000 +0100
-+++ qpdf-11.7.0/libqpdf/QPDF_encryption.cc	2024-01-08 15:19:52.303117277 +0100
-@@ -3,6 +3,8 @@
+diff --git a/libqpdf/QPDFWriter.cc b/libqpdf/QPDFWriter.cc
+index 689fef7..57df1eb 100644
+--- a/libqpdf/QPDFWriter.cc
+++ b/libqpdf/QPDFWriter.cc
+@@ -24,6 +24,10 @@
+ #include <algorithm>
+ #include <stdlib.h>
+ 
+#ifdef USE_CRYPTO_GNUTLS
+#include <gnutls/crypto.h>
+#endif
+
+ QPDFWriter::Members::Members(QPDF& pdf) :
+     pdf(pdf),
+     filename("unspecified"),
+@@ -321,6 +325,13 @@ void
+ QPDFWriter::setDeterministicID(bool val)
+ {
+     this->m->deterministic_id = val;
+
+#ifdef USE_CRYPTO_GNUTLS
+    if (val)
+	GNUTLS_FIPS140_SET_LAX_MODE();
+    else
+	GNUTLS_FIPS140_SET_STRICT_MODE();
+#endif
+ }
+ 
+ void
+@@ -342,6 +353,13 @@ void
+ QPDFWriter::setPreserveEncryption(bool val)
+ {
+     this->m->preserve_encryption = val;
+
+#ifdef USE_CRYPTO_GNUTLS
+    if (val)
+	GNUTLS_FIPS140_SET_STRICT_MODE();
+    else
+	GNUTLS_FIPS140_SET_LAX_MODE();
+#endif
+ }
+ 
+ void
+@@ -2301,12 +2319,23 @@ QPDFWriter::generateID()
+ 	    }
+ 	}
+ 
+#ifdef USE_CRYPTO_GNUTLS
+    unsigned oldmode = gnutls_fips140_mode_enabled();
+
+    gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD);
+#endif
+
+ 	MD5 m;
+ 	m.encodeString(seed.c_str());
+ 	MD5::Digest digest;
+ 	m.digest(digest);
+ 	result = std::string(reinterpret_cast<char*>(digest),
+                              sizeof(MD5::Digest));
+
+#ifdef USE_CRYPTO_GNUTLS
+    gnutls_fips140_set_mode(static_cast<gnutls_fips_mode_t>(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD);
+#endif
+
+     }
 
- #include <qpdf/assert_debug.h>
+     // If /ID already exists, follow the spec: use the original first
+diff --git a/libqpdf/QPDF_encryption.cc b/libqpdf/QPDF_encryption.cc
+index 2ff48df..ce6fb31 100644
+--- a/libqpdf/QPDF_encryption.cc
+++ b/libqpdf/QPDF_encryption.cc
+@@ -1,6 +1,8 @@
+ // This file implements methods from the QPDF class that involve
+ // encryption.
 
 +#include <qpdf/qpdf-config.h>
 +
 #include <qpdf/QPDF.hh>
 
 #include <qpdf/QPDFExc.hh>
-@@ -19,6 +21,10 @@
- #include <algorithm>
- #include <cstring>
+@@ -18,6 +20,10 @@
+ #include <assert.h>
+ #include <string.h>
 
 +#ifdef USE_CRYPTO_GNUTLS
 +# include <gnutls/crypto.h>
 +#endif
 +
 static unsigned char const padding_string[] = {
-     0x28, 0xbf, 0x4e, 0x5e, 0x4e, 0x75, 0x8a, 0x41, 0x64, 0x00, 0x4e, 0x56, 0xff, 0xfa, 0x01, 0x08,
-     0x2e, 0x2e, 0x00, 0xb6, 0xd0, 0x68, 0x3e, 0x80, 0x2f, 0x0c, 0xa9, 0xfe, 0x64, 0x53, 0x69, 0x7a};
-@@ -349,10 +355,21 @@ QPDF::compute_data_key(
+     0x28, 0xbf, 0x4e, 0x5e, 0x4e, 0x75, 0x8a, 0x41,
+     0x64, 0x00, 0x4e, 0x56, 0xff, 0xfa, 0x01, 0x08,
+@@ -380,10 +386,21 @@ QPDF::compute_data_key(std::string const& encryption_key,
 	result += "sAlT";
     }
 
@ -81,12 +151,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
				@@ -81,12 +151,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
 +    gnutls_fips140_set_mode(static_cast<gnutls_fips_mode_t>(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD);
 +#endif
 +
-     return {reinterpret_cast<char*>(digest), std::min(result.length(), toS(16))};
+     return std::string(reinterpret_cast<char*>(digest),
+ 		       std::min(result.length(), toS(16)));
 }
- 
-@@ -976,6 +993,12 @@ QPDF::getKeyForObject(
+@@ -1150,6 +1167,12 @@ QPDF::getKeyForObject(
 void
- QPDF::decryptString(std::string& str, QPDFObjGen const& og)
+ QPDF::decryptString(std::string& str, int objid, int generation)
 {
 +#ifdef USE_CRYPTO_GNUTLS
 +    unsigned oldmode = gnutls_fips140_mode_enabled();
@ -94,12 +164,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
				@@ -94,12 +164,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
 +    gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD);
 +#endif
 +
-     if (!og.isIndirect()) {
+     if (objid == 0)
+     {
 	return;
-     }
-@@ -1036,6 +1059,10 @@ QPDF::decryptString(std::string& str, QP
-     } catch (std::runtime_error& e) {
-         throw damagedPDF("error decrypting string for object " + og.unparse() + ": " + e.what());
+@@ -1230,6 +1253,10 @@ QPDF::decryptString(std::string& str, int objid, int generation)
+ 		      QUtil::int_to_string(objid) + " " +
+ 		      QUtil::int_to_string(generation) + ": " + e.what());
     }
 +
 +#ifdef USE_CRYPTO_GNUTLS
@ -107,10 +177,10 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
				@@ -107,10 +177,10 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
 +#endif
 }
 
- // Prepend a decryption pipeline to 'pipeline'. The decryption pipeline (returned as
-@@ -1051,6 +1078,12 @@ QPDF::decryptStream(
+ void
+@@ -1240,6 +1267,12 @@ QPDF::decryptStream(PointerHolder<EncryptionParameters> encp,
 		    QPDFObjectHandle& stream_dict,
-     std::unique_ptr<Pipeline>& decrypt_pipeline)
+ 		    std::vector<PointerHolder<Pipeline> >& heap)
 {
 +#ifdef USE_CRYPTO_GNUTLS
 +    unsigned oldmode = gnutls_fips140_mode_enabled();
@ -119,12 +189,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
				@@ -119,12 +189,12 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
 +#endif
 +
     std::string type;
-     if (stream_dict.getKey("/Type").isName()) {
-         type = stream_dict.getKey("/Type").getName();
-@@ -1151,6 +1184,10 @@ QPDF::decryptStream(
+     if (stream_dict.getKey("/Type").isName())
+     {
+@@ -1361,6 +1394,10 @@ QPDF::decryptStream(PointerHolder<EncryptionParameters> encp,
                               toI(key.length()));
     }
-     pipeline = decrypt_pipeline.get();
+     heap.push_back(pipeline);
 +
 +#ifdef USE_CRYPTO_GNUTLS
 +    gnutls_fips140_set_mode(static_cast<gnutls_fips_mode_t>(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD);
@ -132,67 +202,3 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
				@@ -132,67 +202,3 @@ diff -up qpdf-11.7.0/libqpdf/QPDF_encryption.cc.relax qpdf-11.7.0/libqpdf/QPDF_e
 }
 
 void
-diff -up qpdf-11.7.0/libqpdf/QPDFWriter.cc.relax qpdf-11.7.0/libqpdf/QPDFWriter.cc
--- qpdf-11.7.0/libqpdf/QPDFWriter.cc.relax	2023-12-24 13:36:07.000000000 +0100
-+++ qpdf-11.7.0/libqpdf/QPDFWriter.cc	2024-01-08 15:17:27.022951614 +0100
-@@ -26,6 +26,10 @@
- #include <cstdlib>
- #include <stdexcept>
- 
-+#ifdef USE_CRYPTO_GNUTLS
-+#include <gnutls/crypto.h>
-+#endif
-+
- QPDFWriter::ProgressReporter::~ProgressReporter() // NOLINT (modernize-use-equals-default)
- {
-     // Must be explicit and not inline -- see QPDF_DLL_CLASS in README-maintainer
-@@ -287,6 +291,13 @@ void
- QPDFWriter::setDeterministicID(bool val)
- {
-     m->deterministic_id = val;
-+
-+#ifdef USE_CRYPTO_GNUTLS
-+    if (val)
-+	GNUTLS_FIPS140_SET_LAX_MODE();
-+    else
-+	GNUTLS_FIPS140_SET_STRICT_MODE();
-+#endif
- }
- 
- void
-@@ -307,6 +318,13 @@ void
- QPDFWriter::setPreserveEncryption(bool val)
- {
-     m->preserve_encryption = val;
-+
-+#ifdef USE_CRYPTO_GNUTLS
-+    if (val)
-+	GNUTLS_FIPS140_SET_STRICT_MODE();
-+    else
-+	GNUTLS_FIPS140_SET_LAX_MODE();
-+#endif
- }
- 
- void
-@@ -1890,11 +1908,21 @@ QPDFWriter::generateID()
-             }
-         }
- 
-+#ifdef USE_CRYPTO_GNUTLS
-+        unsigned oldmode = gnutls_fips140_mode_enabled();
-+
-+        gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, GNUTLS_FIPS140_SET_MODE_THREAD);
-+#endif
-+
-         MD5 m;
-         m.encodeString(seed.c_str());
-         MD5::Digest digest;
-         m.digest(digest);
-         result = std::string(reinterpret_cast<char*>(digest), sizeof(MD5::Digest));
-+
-+#ifdef USE_CRYPTO_GNUTLS
-+        gnutls_fips140_set_mode(static_cast<gnutls_fips_mode_t>(oldmode), GNUTLS_FIPS140_SET_MODE_THREAD);
-+#endif
-     }
- 
-     // If /ID already exists, follow the spec: use the original first word and generate a new second
--- a/SOURCES/qpdf-s390x-disable-streamtest.patch
+++ b/SOURCES/qpdf-s390x-disable-streamtest.patch
--- a/SPECS/qpdf.spec
+++ b/SPECS/qpdf.spec
@ -1,29 +1,34 @@
				@@ -1,29 +1,34 @@
 Summary: Command-line tools and library for transforming PDF files
 Name:    qpdf
-Version: 11.9.0
-Release: 1%{?dist}
-# MIT: e.g. libqpdf/sha2.c, but those are not compiled in (GNUTLS is used)
+Version: 10.3.1
+Release: 7%{?dist}
+# MIT: e.g. libqpdf/sha2.c
 # upstream uses ASL 2.0 now, but he allowed other to distribute qpdf under
 # old license (see README)
-License: Apache-2.0 OR Artistic-2.0
-URL:     https://qpdf.sourceforge.io/
-Source0: https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.gz
-Source1: https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}-doc.zip
-
+License: (Artistic 2.0 or ASL 2.0) and MIT
+URL:     http://qpdf.sourceforge.net/
+Source0: http://downloads.sourceforge.net/sourceforge/qpdf/qpdf-%{version}.tar.gz
+
+Patch0:  qpdf-doc.patch
+# zlib has optimalization for aarch64 now, which gives different output after
+# compression - patch erases 3 tests with generated object stream which were failing
+Patch1:  qpdf-erase-tests-with-generated-object-stream.patch
 # make qpdf working under FIPS, downstream patch
-Patch1:  qpdf-relax.patch
-
+Patch2:  qpdf-relax.patch
+# 1950033 - Possible changes in zlib output causes FTBFS for qpdf
+Patch3:  qpdf-s390x-disable-streamtest.patch

 # gcc and gcc-c++ are no longer in buildroot by default
 # gcc is needed for qpdf-ctest.c
 BuildRequires: gcc
 # gcc-c++ is need for everything except for qpdf-ctest
 BuildRequires: gcc-c++
-# uses cmake
-BuildRequires: cmake
+# uses make
+BuildRequires: make

 BuildRequires: zlib-devel
 BuildRequires: libjpeg-turbo-devel
+BuildRequires: pcre-devel

 # for gnutls crypto
 BuildRequires: gnutls-devel
@ -38,7 +43,6 @@ BuildRequires: perl(Cwd)
				@@ -38,7 +43,6 @@ BuildRequires: perl(Cwd)
 BuildRequires: perl(Digest::MD5)
 BuildRequires: perl(Digest::SHA)
 BuildRequires: perl(File::Basename)
-BuildRequires: perl(File::Compare)
 BuildRequires: perl(File::Copy)
 BuildRequires: perl(File::Find)
 BuildRequires: perl(File::Spec)
@ -51,6 +55,11 @@ BuildRequires: perl(strict)
				@@ -51,6 +55,11 @@ BuildRequires: perl(strict)
 # perl(Term::ANSIColor) - not needed for tests
 # perl(Term::ReadKey) - not needed for tests

+# for autoreconf
+BuildRequires: autoconf
+BuildRequires: automake
+BuildRequires: libtool
+
 Requires: %{name}-libs%{?_isa} = %{version}-%{release}

 %package libs
@ -63,7 +72,6 @@ Requires: %{name}-libs%{?_isa} = %{version}-%{release}
				@@ -63,7 +72,6 @@ Requires: %{name}-libs%{?_isa} = %{version}-%{release}
 %package doc
 Summary: QPDF Manual
 BuildArch: noarch
-BuildRequires: unzip
 Requires: %{name}-libs = %{version}-%{release}

 %description
@ -88,34 +96,37 @@ QPDF Manual
				@@ -88,34 +96,37 @@ QPDF Manual
 %prep
 %setup -q

-%patch -P 1 -p1 -b .relax
-
-# unpack zip file with manual
-unzip %{SOURCE1}
-
+# fix 'complete manual location' note in man pages
+%patch0 -p1 -b .doc
+%ifarch aarch64
+%patch1 -p1 -b .erase-tests-with-generated-object-stream
+%endif
+%patch2 -p1 -b .relax
+%ifarch s390x
+%patch3 -p1 -b .s390x-disable-streamtest
+%endif

 %build
-%cmake -DBUILD_STATIC_LIBS=0 \
-       -DREQUIRE_CRYPTO_GNUTLS=1 \
-       -DUSE_IMPLICIT_CRYPTO=0 \
-       -DSHOW_FAILED_TEST_OUTPUT=1 \
-       -DINSTALL_CMAKE_PACKAGE=0
+# work-around check-rpaths errors
+autoreconf --verbose --force --install
+# automake files needed to be regenerated in 8.4.0 - check if this can be removed
+# in the next qpdf release
+./autogen.sh

-%cmake_build
+%configure --disable-static \
+           --enable-crypto-gnutls \
+           --disable-implicit-crypto \
+           --enable-show-failed-test-output

-%install
-%cmake_install
+%make_build

-install -m 0644 %{name}-%{version}-doc/%{name}-manual.pdf %{buildroot}/%{_pkgdocdir}/%{name}-manual.pdf
+%install
+%make_install

-# install bash/zsh completions
-mkdir -p %{buildroot}%{bash_completions_dir}
-mkdir -p %{buildroot}%{zsh_completions_dir}
-install -m 0644 completions/bash/qpdf %{buildroot}%{bash_completions_dir}/qpdf
-install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf
+rm -f %{buildroot}%{_libdir}/libqpdf.la

 %check
-%ctest
+make check

 %ldconfig_scriptlets libs

@ -124,16 +135,12 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf
				@@ -124,16 +135,12 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf
 %{_bindir}/qpdf
 %{_bindir}/zlib-flate
 %{_mandir}/man1/*
-%dir %{bash_completions_dir}
-%{bash_completions_dir}/qpdf
-%dir %{zsh_completions_dir}
-%{zsh_completions_dir}/_qpdf

 %files libs
-%doc README.md TODO.md ChangeLog
-%license Artistic-2.0 LICENSE.txt NOTICE.md
-%{_libdir}/libqpdf.so.29
-%{_libdir}/libqpdf.so.29.9.0
+%doc README.md TODO ChangeLog
+%license Artistic-2.0
+%{_libdir}/libqpdf.so.28
+%{_libdir}/libqpdf.so.28.3.1

 %files devel
 %doc examples/*.cc examples/*.c
@ -146,109 +153,24 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf
				@@ -146,109 +153,24 @@ install -m 0644 completions/zsh/_qpdf %{buildroot}%{zsh_completions_dir}/_qpdf


 %changelog
-* Fri Mar 01 2024 Zdenek Dohnal <zdohnal@redhat.com> - 11.9.0-1
- 2267205 - TRIAGE CVE-2024-24246 qpdf - Heap Buffer Overflow vulnerability in qpdf [fedora-all]
- 2265854 - qpdf-11.9.0 is available
-
-* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 11.8.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 11.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Tue Jan 09 2024 Zdenek Dohnal <zdohnal@redhat.com> - 11.8.0-1
- 2257313 - qpdf-11.8.0 is available
-
-* Mon Jan 08 2024 Zdenek Dohnal <zdohnal@redhat.com> - 11.7.0-1
- 2255755 - qpdf-11.7.0 is available
-
-* Tue Dec 19 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.6.4-2
- 2254778 - remove the tests which fail with zlib-ng-compat for now
-
-* Mon Dec 18 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.6.4-1
- 2253901 - qpdf-11.6.4 is available
-
-* Thu Nov 02 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.6.3-1
- 2244319 - qpdf-11.6.3 is available
-
-* Mon Oct 09 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.6.2-1
- 2242670 - qpdf-11.6.2 is available
-
-* Tue Sep 12 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.6.1-1
- 2237125 - qpdf-11.6.1 is available
-
-* Wed Jul 26 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.5.0-1
- 2221506 - qpdf-11.5.0 is available
-
-* Fri Jul 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 11.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Mon May 22 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.4.0-1
- 2208892 - qpdf-11.4.0 is available
-
-* Mon Mar 27 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.3.0-2
- 2181519 - qpdf bash and zsh completion files are missing
-
-* Thu Mar 02 2023 Zdenek Dohnal <zdohnal@redhat.com> - 11.3.0-1
- 2173354 - qpdf-11.3.0 is available
-
-* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 11.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Tue Nov 22 2022 Zdenek Dohnal <zdohnal@redhat.com> - 11.2.0-1
- 2144359 - qpdf-11.2.0 is available
-
-* Thu Oct 13 2022 Zdenek Dohnal <zdohnal@redhat.com> - 11.1.1-1
- 2125823 - qpdf-11.1.1 is available
-
-* Thu Sep 22 2022 Zdenek Dohnal <zdohnal@redhat.com> - 11.1.0-1
- 2125823 - qpdf-11.1.0 is available, move to cmake
-
-* Thu Sep 22 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.3-5
- use `grep -E` in test suite (bz2127957)
-
-* Mon Jul 25 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.3-4
- qpdf doesn't depend on pcre since 7.0b1
-
-* Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 10.6.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Thu Jul 14 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.3-2
- 2107240 - FIPS breaks pdftopdf and bannertopdf
-
-* Fri Mar 18 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.3-1
- 2063429 - qpdf-10.6.3 is available
-
-* Thu Feb 17 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.2-1
- 2053647 - qpdf-10.6.2 is available
-
-* Mon Feb 14 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.1-1
- 2053647 - qpdf-10.6.1 is available
-
-* Thu Feb 10 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.6.0-1
- 2052569 - qpdf-10.6.0 is available
-
-* Fri Jan 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 10.5.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Wed Jan 05 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.5.0-2
- add qpdf-manual - now it is in a different archive
+* Wed Jan 04 2023 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-7
+- 2157765 - Ship qpdf-devel in CRB

-* Mon Jan 03 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.5.0-1
- 2034671 - qpdf-10.5.0 is available
+* Fri Jul 15 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-6
+- 2106940 - FIPS breaks pdftopdf and bannertopdf

-* Mon Dec 06 2021 Zdenek Dohnal <zdohnal@redhat.com> - 10.4.0-1
- 2023979 - qpdf-10.4.0 is available
+* Wed Jun 29 2022 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-5
+- 2095993 - Move qpdf to CRB repository

-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
+* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 10.3.1-4
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+  Related: rhbz#1991688

-* Thu May 20 2021 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.2-1
- 1958536 - qpdf-10.3.2 is available
+* Tue Apr 20 2021 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-3
+- 1950033 - Possible changes in zlib output causes FTBFS for qpdf

-* Mon Apr 19 2021 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-2
- aarch64 specific patches were removed from zlib, so no need for ours
- zlib got downstream patches on s390x, we need to patch qpdf test suite for it
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 10.3.1-2
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

 * Fri Mar 12 2021 Zdenek Dohnal <zdohnal@redhat.com> - 10.3.1-1
 - 1937988 - qpdf-10.3.1 is available