xmlgraphics-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sstei...@apache.org
Subject svn commit: r1832095 - in /xmlgraphics/site/trunk/content: batik/download.mdtext batik/index.mdtext batik/install.mdtext commons/changes.mdtext commons/download.mdtext commons/index.mdtext security.mdtext
Date Wed, 23 May 2018 11:55:12 GMT
Author: ssteiner
Date: Wed May 23 11:55:12 2018
New Revision: 1832095

URL: http://svn.apache.org/viewvc?rev=1832095&view=rev
Log:
Release docs

Modified:
    xmlgraphics/site/trunk/content/batik/download.mdtext
    xmlgraphics/site/trunk/content/batik/index.mdtext
    xmlgraphics/site/trunk/content/batik/install.mdtext
    xmlgraphics/site/trunk/content/commons/changes.mdtext
    xmlgraphics/site/trunk/content/commons/download.mdtext
    xmlgraphics/site/trunk/content/commons/index.mdtext
    xmlgraphics/site/trunk/content/security.mdtext

Modified: xmlgraphics/site/trunk/content/batik/download.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/batik/download.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/batik/download.mdtext (original)
+++ xmlgraphics/site/trunk/content/batik/download.mdtext Wed May 23 11:55:12 2018
@@ -13,6 +13,10 @@ Here are the links to each package’
 
 |     |     |     |     |
 |-----|-----|-----|-----|
+| batik-bin-1.10.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.tar.gz.asc)
|  [SHA512](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.tar.gz.sha512)
|
+| batik-bin-1.10.zip | [PGP](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.zip.asc)
|  [SHA512](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.zip.sha512)
|
+| batik-src-1.10.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.tar.gz.asc)
|  [SHA512](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.tar.gz.sha512)
|
+| batik-src-1.10.zip | [PGP](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.zip.asc)
|  [SHA512](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.zip.sha512)
|
 | batik-bin-1.9.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.tar.gz.asc)
| [MD5](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.tar.gz.md5) |
[SHA1](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.tar.gz.sha1) |
 | batik-bin-1.9.zip | [PGP](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.zip.asc)
| [MD5](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.zip.md5) | [SHA1](http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.zip.sha1)
|
 | batik-src-1.9.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.9.tar.gz.asc)
| [MD5](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.9.tar.gz.md5) | [SHA1](http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.9.tar.gz.sha1)
|

Modified: xmlgraphics/site/trunk/content/batik/index.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/batik/index.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/batik/index.mdtext (original)
+++ xmlgraphics/site/trunk/content/batik/index.mdtext Wed May 23 11:55:12 2018
@@ -59,7 +59,7 @@ SVG documents can be interactive and dyn
 
 ## Implementation status { #status}
 
-The latest revision of Batik, release 1.9, is a conformant [static SVG implementation](http://www.w3.org/TR/SVG11/conform.html#ConformingSVGViewers)
and supports [interactivity](http://www.w3.org/TR/SVG11/interact.html), [linking](http://www.w3.org/TR/SVG11/linking.html)
and [scripting](http://www.w3.org/TR/SVG11/script.html) features of the SVG specification.
This release supports a nearly complete implementation of declarative [animation](http://www.w3.org/TR/SVG11/animate.html),
too.
+The latest revision of Batik, release 1.10, is a conformant [static SVG implementation](http://www.w3.org/TR/SVG11/conform.html#ConformingSVGViewers)
and supports [interactivity](http://www.w3.org/TR/SVG11/interact.html), [linking](http://www.w3.org/TR/SVG11/linking.html)
and [scripting](http://www.w3.org/TR/SVG11/script.html) features of the SVG specification.
This release supports a nearly complete implementation of declarative [animation](http://www.w3.org/TR/SVG11/animate.html),
too.
 
 See the [status](status.html) page for a detailed description of the set of SVG features
Batik supports.
 

Modified: xmlgraphics/site/trunk/content/batik/install.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/batik/install.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/batik/install.mdtext (original)
+++ xmlgraphics/site/trunk/content/batik/install.mdtext Wed May 23 11:55:12 2018
@@ -30,24 +30,24 @@ All `batik` package references are short
 
 ## Verify releases { #verify}
 
-It is essential that you verify the integrity of the downloaded files using the PGP or MD5
signatures.
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA512
signatures.
 
 The PGP signatures can be verified using PGP or GPG. First download the [KEYS](http://www.apache.org/dist/xmlgraphics/batik/KEYS)
as well as the `asc` signature file for the particular distribution you choose. Make sure
you get these files from the [main distribution directory](http://www.apache.org/dist/xmlgraphics/batik/),
rather than from a mirror. Then verify the signatures using:
 
-`pgpk -a KEYS pgpv batik-[bin|src]-1.9.zip.asc`
+`pgpk -a KEYS pgpv batik-[bin|src]-1.10.zip.asc`
 
 *or*
 
-`pgp -ka KEYS pgp batik-[bin|src]-1.9.zip.asc`
+`pgp -ka KEYS pgp batik-[bin|src]-1.10.zip.asc`
 
 *or*
 
-`gpg --import KEYS pgp batik-[bin|src]-1.9.zip.asc`
+`gpg --import KEYS pgp batik-[bin|src]-1.10.zip.asc`
 
 *or*
 
-`gpg --import KEYS gpg --verify batik-[bin|src]-1.9.zip.asc`
+`gpg --import KEYS gpg --verify batik-[bin|src]-1.10.zip.asc`
 
-Alternatively, you can verify the MD5 signature on the files. A UNIX program called `md5`
or `md5sum` is included in many UNIX distributions. It is also available as part of [GNU Textutils](http://www.gnu.org/software/textutils/textutils.html).
Windows users can get binary md5 programs from [here](http://www.fourmilab.ch/md5/), [here](http://www.pc-tools.net/win32/freeware/console/),
or [here](http://www.slavasoft.com/fsum/).
+Alternatively, you can verify the SHA512 signature on the files. For steps see [here](http://www.apache.org/info/verification.html).
 
-We recommend using PGP signatures as they can provide a much higher level of assurance compared
with MD5.
+We recommend using PGP signatures as they can provide a much higher level of assurance compared
with SHA512.

Modified: xmlgraphics/site/trunk/content/commons/changes.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/commons/changes.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/commons/changes.mdtext (original)
+++ xmlgraphics/site/trunk/content/commons/changes.mdtext Wed May 23 11:55:12 2018
@@ -8,6 +8,17 @@ Title: History of Changes
 
 Changes are sorted by "type" and then chronologically with the most recent at the top. These
symbols denote the various action types: ![add](/images/add.jpg)=add, ![fix](/images/fix.jpg)=fix,
![remove](/images/remove.jpg)=remove, ![update](/images/update.jpg)=update
 
+## Version 2.3 (23 May 2018) { #version_2.3}
+
+### Changes to the Code Base { #Code_2.3}
+
+ - FOP-2251: PDF to PostScript not showing transparency
+ - FOP-2739: Avoid rastering PDF with Smask to image
+ - FOP-2740: PDF to PostScript tiling pattern error in Acrobat
+ - FOP-2753: PDF to PostScript allow fop fonts as fallback
+ - XGC-98: UndeclaredThrowableException while loading images
+ - XGC-111: Improve error message when language is empty
+
 ## Version 2.2 (24 March 2017) { #version_2.2}
 
 ### Changes to the Code Base { #Code_2.2}

Modified: xmlgraphics/site/trunk/content/commons/download.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/commons/download.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/commons/download.mdtext (original)
+++ xmlgraphics/site/trunk/content/commons/download.mdtext Wed May 23 11:55:12 2018
@@ -13,10 +13,10 @@ Here are the links to each package’
 
 |     |     |     |     |
 |-----|-----|-----|-----|
-| xmlgraphics-commons-2.3-bin.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.tar.gz.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.2-bin.tar.gz.sha512)
|
-| xmlgraphics-commons-2.3-bin.zip | [PGP](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.zip.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.2-bin.zip.sha512)
|
-| xmlgraphics-commons-2.3-src.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.tar.gz.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.2-src.tar.gz.sha512)
|
-| xmlgraphics-commons-2.3-src.zip | [PGP](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.zip.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.2-src.zip.sha512)
|
+| xmlgraphics-commons-2.3-bin.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.tar.gz.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.tar.gz.sha512)
|
+| xmlgraphics-commons-2.3-bin.zip | [PGP](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.zip.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.zip.sha512)
|
+| xmlgraphics-commons-2.3-src.tar.gz | [PGP](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.tar.gz.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.tar.gz.sha512)
|
+| xmlgraphics-commons-2.3-src.zip | [PGP](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.zip.asc)
| [SHA512](http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.zip.sha512)
|
 
 ## Download from Subversion { #svn}
 

Modified: xmlgraphics/site/trunk/content/commons/index.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/commons/index.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/commons/index.mdtext (original)
+++ xmlgraphics/site/trunk/content/commons/index.mdtext Wed May 23 11:55:12 2018
@@ -29,6 +29,9 @@ Components which have been ported from [
 
 ## News { #News}
 
+### 23 May 2018: Version 2.3 Released
+Minor changes to support FOP 2.3 release
+
 ### 24 Mar 2017: Version 2.2 Released
 Minor changes to support FOP 2.2 release
 

Modified: xmlgraphics/site/trunk/content/security.mdtext
URL: http://svn.apache.org/viewvc/xmlgraphics/site/trunk/content/security.mdtext?rev=1832095&r1=1832094&r2=1832095&view=diff
==============================================================================
--- xmlgraphics/site/trunk/content/security.mdtext (original)
+++ xmlgraphics/site/trunk/content/security.mdtext Wed May 23 11:55:12 2018
@@ -8,6 +8,16 @@ The *Apache™ XML Graphics Project*
 
 ### Apache™ Batik Project - Apache Batik Security { #BatikSecurity}
 
+**Fixed in Batik 1.10**
+
+medium: Deserialization vulnerability CVE-2018-8013
+
+Issue Public: 2018-05-23
+
+Update Released: 2018-05-23 (Batik 1.10)
+
+Affects: 1.9.1 and earlier
+
 **Fixed in Batik 1.9**
 
 medium: XXE vulnerability CVE-2017-5662



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: commits-help@xmlgraphics.apache.org


Mime
View raw message