libpodofo (0.9.0-1.2ubuntu0.1~esm1) trusty-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow/read, Null pointer
    dereferences, Denial of service, and Integer overflows
    - debian/patches/CVE-2015-8981.patch: Resolve heap-based buffer overflow
      in PdfParser::ReadXRefSubsection
    - debian/patches/CVE-2017-5852.patch: Resolve infinite loop in
      PdfPage::GetInheritedKeyFromObject()
    - debian/patches/CVE-2017-5853-and-CVE-2017-6844.patch: Resolve integer
      overflow and heap-based buffer overflow in PdfParser.cpp
    - debian/patches/CVE-2017-5854.patch: Resolve null pointer dereference in
      PdfOutputStream.cpp
    - debian/patches/CVE-2017-5886.patch: Resolve heap-based buffer overflow
    - debian/patches/CVE-2017-6840-6842-6843.patch:  Resolve heap-based buffer
      overflows and DoS (invalid memory read) in
      ColorChanger::ReplaceColorsInPage()
    - debian/patches/CVE-2017-6847-6848.patch: Resolve null pointer
      dereference in PdfXObject::PdfXObject()
    - debian/patches/CVE-2017-7378.patch: Resolve heap-based buffer over-read
      in PdfPainter::ExpandTabs()
    - debian/patches/CVE-2017-7379.patch: Resolve heap-based buffer over-read
      in PdfSimpleEncoding::InitEncodingTable()
    - debian/patches/CVE-2017-7380-7383.patch: Resolve null pointer
      dereference in PdfPage::GetFromResources()
    - CVE-2015-8981
    - CVE-2017-5852
    - CVE-2017-5853
    - CVE-2017-5854
    - CVE-2017-5886
    - CVE-2017-6840
    - CVE-2017-6842
    - CVE-2017-6843
    - CVE-2017-6844
    - CVE-2017-6847
    - CVE-2017-6848
    - CVE-2017-7378
    - CVE-2017-7379
    - CVE-2017-7380
    - CVE-2017-7381
    - CVE-2017-7382
    - CVE-2017-7383

 -- Mike Salvatore <mike.salvatore@canonical.com>  Thu, 17 Sep 2020 08:58:29 -0400

libpodofo (0.9.0-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix another freetype path issue with version >= 2.5 (Closes: #730889).
  * Build-Depends against libtiff-dev, not libtiff4-dev.

 -- David Prévot <taffit@debian.org>  Thu, 26 Dec 2013 22:49:14 -0400

libpodofo (0.9.0-1.1) unstable; urgency=low

  * Non-maintainer upload.

  [ Didier Raboud ]
  * Build-Depends against libjpeg-dev, not libjpeg62-dev (Closes: #639051).
  * Import Ubuntu patch to fix build against the multiarch'ed libfreetype.

  [ Ubuntu: Philip Muskovac & Daniel T Chen ]
  * debian/rules: export DEB_HOST_MULTIARCH for the freetype patch.
  * debian/patches/freetype_multiarch: Add multiarch directory to cmake search
    path for freetype (LP: #778410, #831277).

 -- Didier Raboud <odyx@debian.org>  Wed, 09 Nov 2011 16:02:17 +0100

libpodofo (0.9.0-1) unstable; urgency=low

  * New upstream release. The packaging is based on 0.8.4 that has been
    accepted into Debian.
  * debian/rules:
    - Removed boost from cmake options and updated library version.
    - Rewrote rules for clarity.
  * debian/source/format: changed to v3.0 (quilt).
  * debian/control:
    - Added a build depends on quilt.
    - Changed package names to 0.9.0 from 0.8.4.
  * debian/patches/CMakeLists.txt.top: Removed the debian dir from cmake path.
  * debian/patches/FindZLIB.cmake: Removed a duplicate cmake find file.
  * debian/*: renamed 0.8.4 to 0.9.0 in file names.

 -- Oleksandr Moskalenko <malex@debian.org>  Mon, 14 Mar 2011 16:58:26 -0500

libpodofo (0.8.4-1) unstable; urgency=low

  * New upstream release. There is a soname change, so this package supersedes
    libpodofo0.8.0 for building PoDoFo enabled packages (Closes: #590823).
  * man/*.1: Wrote man pages for all provided utils.
  * debian/libpodofo-utils.manpages: Added a control file for dh_installman to
    install man pages.
  * debian/rules: Added a dh_installman rule to install man pages.
  * debian/control: Unified short descriptions.
  * debian/copyright:
    - Changed to DEP5 format.
    - Added copyright and license information for PdfEncrypt.cpp and
      cmake/modules/* per ftpmaster request.

 -- Oleksandr Moskalenko <malex@debian.org>  Wed, 01 Dec 2010 20:56:22 -0600

libpodofo0.8.0 (0.8.0+svn20100512-2) unstable; urgency=low

  * Added a build-depends on libboost-graph-dev to make podofo use improved
    graphics facilities provided by boost.

 -- Oleksandr Moskalenko <malex@debian.org>  Mon, 17 May 2010 09:09:32 -0500

libpodofo0.8.0 (0.8.0+svn20100512-1) unstable; urgency=low

  * Initial release (Closes: #431809).

 -- Oleksandr Moskalenko <malex@debian.org>  Wed, 12 May 2010 17:37:56 -0500
