xmlgraphics-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From build...@apache.org
Subject svn commit: r1030280 - in /websites/staging/xmlgraphics/trunk/content: ./ batik/download.html batik/index.html batik/install.html commons/changes.html commons/download.html commons/index.html security.html
Date Wed, 23 May 2018 11:55:26 GMT
Author: buildbot
Date: Wed May 23 11:55:26 2018
New Revision: 1030280

Log:
Staging update by buildbot for xmlgraphics

Modified:
    websites/staging/xmlgraphics/trunk/content/   (props changed)
    websites/staging/xmlgraphics/trunk/content/batik/download.html
    websites/staging/xmlgraphics/trunk/content/batik/index.html
    websites/staging/xmlgraphics/trunk/content/batik/install.html
    websites/staging/xmlgraphics/trunk/content/commons/changes.html
    websites/staging/xmlgraphics/trunk/content/commons/download.html
    websites/staging/xmlgraphics/trunk/content/commons/index.html
    websites/staging/xmlgraphics/trunk/content/security.html

Propchange: websites/staging/xmlgraphics/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Wed May 23 11:55:26 2018
@@ -1 +1 @@
-1832093
+1832095

Modified: websites/staging/xmlgraphics/trunk/content/batik/download.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/batik/download.html (original)
+++ websites/staging/xmlgraphics/trunk/content/batik/download.html Wed May 23 11:55:26 2018
@@ -219,6 +219,30 @@ h2:hover > .headerlink, h3:hover > .head
 </thead>
 <tbody>
 <tr>
+<td>batik-bin-1.10.tar.gz</td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.tar.gz.asc">PGP</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.tar.gz.sha512">SHA512</a></td>
+<td></td>
+</tr>
+<tr>
+<td>batik-bin-1.10.zip</td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.zip.asc">PGP</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.10.zip.sha512">SHA512</a></td>
+<td></td>
+</tr>
+<tr>
+<td>batik-src-1.10.tar.gz</td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.tar.gz.asc">PGP</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.tar.gz.sha512">SHA512</a></td>
+<td></td>
+</tr>
+<tr>
+<td>batik-src-1.10.zip</td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.zip.asc">PGP</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/batik/source/batik-src-1.10.zip.sha512">SHA512</a></td>
+<td></td>
+</tr>
+<tr>
 <td>batik-bin-1.9.tar.gz</td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.tar.gz.asc">PGP</a></td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/batik/binaries/batik-bin-1.9.tar.gz.md5">MD5</a></td>

Modified: websites/staging/xmlgraphics/trunk/content/batik/index.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/batik/index.html (original)
+++ websites/staging/xmlgraphics/trunk/content/batik/index.html Wed May 23 11:55:26 2018
@@ -255,7 +255,7 @@ h2:hover > .headerlink, h3:hover > .head
 <p>This specification defines the features and syntax for Scalable Vector Graphics
(SVG). SVG is a language for describing two-dimensional graphics in XML [ <a href="http://www.w3.org/TR/REC-xml">XML10</a>
]. SVG allows for three types of graphic objects: vector graphic shapes (e.g., paths consisting
of straight lines and curves), images and text. Graphical objects can be grouped, styled,
transformed and composited into previously rendered objects. The feature set includes nested
transformations, clipping paths, alpha masks, filter effects and template objects.</p>
 <p>SVG documents can be interactive and dynamic. Animations can be defined and triggered
either declaratively (i.e., by embedding SVG animation elements in SVG content) or via scripting.</p>
 <h2 id="status">Implementation status<a class="headerlink" href="#status" title="Permanent
link">&para;</a></h2>
-<p>The latest revision of Batik, release 1.9, is a conformant <a href="http://www.w3.org/TR/SVG11/conform.html#ConformingSVGViewers">static
SVG implementation</a> and supports <a href="http://www.w3.org/TR/SVG11/interact.html">interactivity</a>,
<a href="http://www.w3.org/TR/SVG11/linking.html">linking</a> and <a href="http://www.w3.org/TR/SVG11/script.html">scripting</a>
features of the SVG specification. This release supports a nearly complete implementation
of declarative <a href="http://www.w3.org/TR/SVG11/animate.html">animation</a>,
too.</p>
+<p>The latest revision of Batik, release 1.10, is a conformant <a href="http://www.w3.org/TR/SVG11/conform.html#ConformingSVGViewers">static
SVG implementation</a> and supports <a href="http://www.w3.org/TR/SVG11/interact.html">interactivity</a>,
<a href="http://www.w3.org/TR/SVG11/linking.html">linking</a> and <a href="http://www.w3.org/TR/SVG11/script.html">scripting</a>
features of the SVG specification. This release supports a nearly complete implementation
of declarative <a href="http://www.w3.org/TR/SVG11/animate.html">animation</a>,
too.</p>
 <p>See the <a href="status.html">status</a> page for a detailed description
of the set of SVG features Batik supports.</p>
 <h2 id="download">Download Batik<a class="headerlink" href="#download" title="Permanent
link">&para;</a></h2>
 <p>You can get the Batik distribution, source and binary, from the <a href="download.html">download
page</a>.

Modified: websites/staging/xmlgraphics/trunk/content/batik/install.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/batik/install.html (original)
+++ websites/staging/xmlgraphics/trunk/content/batik/install.html Wed May 23 11:55:26 2018
@@ -223,17 +223,17 @@ h2:hover > .headerlink, h3:hover > .head
 <p><img alt="Batik jar file dependency graph" src="images/batik-jars-deps-small.svg"
title="" /></p>
 <p>All <code>batik</code> package references are short for <code>org.apache.batik</code>.</p>
 <h2 id="verify">Verify releases<a class="headerlink" href="#verify" title="Permanent
link">&para;</a></h2>
-<p>It is essential that you verify the integrity of the downloaded files using the
PGP or MD5 signatures.</p>
+<p>It is essential that you verify the integrity of the downloaded files using the
PGP or SHA512 signatures.</p>
 <p>The PGP signatures can be verified using PGP or GPG. First download the <a href="http://www.apache.org/dist/xmlgraphics/batik/KEYS">KEYS</a>
as well as the <code>asc</code> signature file for the particular distribution
you choose. Make sure you get these files from the <a href="http://www.apache.org/dist/xmlgraphics/batik/">main
distribution directory</a>, rather than from a mirror. Then verify the signatures using:</p>
-<p><code>pgpk -a KEYS pgpv batik-[bin|src]-1.9.zip.asc</code></p>
+<p><code>pgpk -a KEYS pgpv batik-[bin|src]-1.10.zip.asc</code></p>
 <p><em>or</em></p>
-<p><code>pgp -ka KEYS pgp batik-[bin|src]-1.9.zip.asc</code></p>
+<p><code>pgp -ka KEYS pgp batik-[bin|src]-1.10.zip.asc</code></p>
 <p><em>or</em></p>
-<p><code>gpg --import KEYS pgp batik-[bin|src]-1.9.zip.asc</code></p>
+<p><code>gpg --import KEYS pgp batik-[bin|src]-1.10.zip.asc</code></p>
 <p><em>or</em></p>
-<p><code>gpg --import KEYS gpg --verify batik-[bin|src]-1.9.zip.asc</code></p>
-<p>Alternatively, you can verify the MD5 signature on the files. A UNIX program called
<code>md5</code> or <code>md5sum</code> is included in many UNIX distributions.
It is also available as part of <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>,
<a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
-<p>We recommend using PGP signatures as they can provide a much higher level of assurance
compared with MD5.</p></div>
+<p><code>gpg --import KEYS gpg --verify batik-[bin|src]-1.10.zip.asc</code></p>
+<p>Alternatively, you can verify the SHA512 signature on the files. For steps see <a
href="http://www.apache.org/info/verification.html">here</a>.</p>
+<p>We recommend using PGP signatures as they can provide a much higher level of assurance
compared with SHA512.</p></div>
       </div>
       
       <div class="clear"></div>

Modified: websites/staging/xmlgraphics/trunk/content/commons/changes.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/commons/changes.html (original)
+++ websites/staging/xmlgraphics/trunk/content/commons/changes.html Wed May 23 11:55:26 2018
@@ -179,6 +179,16 @@ h2:hover > .headerlink, h3:hover > .head
 <p><a href="changes.rss">changes.rss</a></p>
 <h2 id="introduction">Introduction and explanation of symbols<a class="headerlink"
href="#introduction" title="Permanent link">&para;</a></h2>
 <p>Changes are sorted by "type" and then chronologically with the most recent at the
top. These symbols denote the various action types: <img alt="add" src="/images/add.jpg"
/>=add, <img alt="fix" src="/images/fix.jpg" />=fix, <img alt="remove" src="/images/remove.jpg"
/>=remove, <img alt="update" src="/images/update.jpg" />=update</p>
+<h2 id="version_2.3">Version 2.3 (23 May 2018)<a class="headerlink" href="#version_2.3"
title="Permanent link">&para;</a></h2>
+<h3 id="Code_2.3">Changes to the Code Base<a class="headerlink" href="#Code_2.3"
title="Permanent link">&para;</a></h3>
+<ul>
+<li>FOP-2251: PDF to PostScript not showing transparency</li>
+<li>FOP-2739: Avoid rastering PDF with Smask to image</li>
+<li>FOP-2740: PDF to PostScript tiling pattern error in Acrobat</li>
+<li>FOP-2753: PDF to PostScript allow fop fonts as fallback</li>
+<li>XGC-98: UndeclaredThrowableException while loading images</li>
+<li>XGC-111: Improve error message when language is empty</li>
+</ul>
 <h2 id="version_2.2">Version 2.2 (24 March 2017)<a class="headerlink" href="#version_2.2"
title="Permanent link">&para;</a></h2>
 <h3 id="Code_2.2">Changes to the Code Base<a class="headerlink" href="#Code_2.2"
title="Permanent link">&para;</a></h3>
 <ul>

Modified: websites/staging/xmlgraphics/trunk/content/commons/download.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/commons/download.html (original)
+++ websites/staging/xmlgraphics/trunk/content/commons/download.html Wed May 23 11:55:26 2018
@@ -193,25 +193,25 @@ h2:hover > .headerlink, h3:hover > .head
 <tr>
 <td>xmlgraphics-commons-2.3-bin.tar.gz</td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.tar.gz.asc">PGP</a></td>
-<td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.2-bin.tar.gz.sha512">SHA512</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.tar.gz.sha512">SHA512</a></td>
 <td></td>
 </tr>
 <tr>
 <td>xmlgraphics-commons-2.3-bin.zip</td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.zip.asc">PGP</a></td>
-<td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.2-bin.zip.sha512">SHA512</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/commons/binaries/xmlgraphics-commons-2.3-bin.zip.sha512">SHA512</a></td>
 <td></td>
 </tr>
 <tr>
 <td>xmlgraphics-commons-2.3-src.tar.gz</td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.tar.gz.asc">PGP</a></td>
-<td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.2-src.tar.gz.sha512">SHA512</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.tar.gz.sha512">SHA512</a></td>
 <td></td>
 </tr>
 <tr>
 <td>xmlgraphics-commons-2.3-src.zip</td>
 <td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.zip.asc">PGP</a></td>
-<td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.2-src.zip.sha512">SHA512</a></td>
+<td><a href="http://www.apache.org/dist/xmlgraphics/commons/source/xmlgraphics-commons-2.3-src.zip.sha512">SHA512</a></td>
 <td></td>
 </tr>
 </tbody>

Modified: websites/staging/xmlgraphics/trunk/content/commons/index.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/commons/index.html (original)
+++ websites/staging/xmlgraphics/trunk/content/commons/index.html Wed May 23 11:55:26 2018
@@ -239,6 +239,8 @@ h2:hover > .headerlink, h3:hover > .head
 </tbody>
 </table>
 <h2 id="News">News<a class="headerlink" href="#News" title="Permanent link">&para;</a></h2>
+<h3 id="23-may-2018-version-23-released">23 May 2018: Version 2.3 Released<a class="headerlink"
href="#23-may-2018-version-23-released" title="Permanent link">&para;</a></h3>
+<p>Minor changes to support FOP 2.3 release</p>
 <h3 id="24-mar-2017-version-22-released">24 Mar 2017: Version 2.2 Released<a class="headerlink"
href="#24-mar-2017-version-22-released" title="Permanent link">&para;</a></h3>
 <p>Minor changes to support FOP 2.2 release</p>
 <h3 id="14-jan-2016-version-21-released">14 Jan 2016: Version 2.1 Released<a class="headerlink"
href="#14-jan-2016-version-21-released" title="Permanent link">&para;</a></h3>

Modified: websites/staging/xmlgraphics/trunk/content/security.html
==============================================================================
--- websites/staging/xmlgraphics/trunk/content/security.html (original)
+++ websites/staging/xmlgraphics/trunk/content/security.html Wed May 23 11:55:26 2018
@@ -179,6 +179,11 @@ h2:hover > .headerlink, h3:hover > .head
 <h2 id="PublishedVulnerabilities">Published Vulnerabilities<a class="headerlink"
href="#PublishedVulnerabilities" title="Permanent link">&para;</a></h2>
 <p>The <em>Apache&trade; XML Graphics Project</em> has collected its
Security related information for all of its sub-projects to this page.</p>
 <h3 id="BatikSecurity">Apache&trade; Batik Project - Apache Batik Security<a
class="headerlink" href="#BatikSecurity" title="Permanent link">&para;</a></h3>
+<p><strong>Fixed in Batik 1.10</strong></p>
+<p>medium: Deserialization vulnerability CVE-2018-8013</p>
+<p>Issue Public: 2018-05-23</p>
+<p>Update Released: 2018-05-23 (Batik 1.10)</p>
+<p>Affects: 1.9.1 and earlier</p>
 <p><strong>Fixed in Batik 1.9</strong></p>
 <p>medium: XXE vulnerability CVE-2017-5662</p>
 <p>Issue Public: 2017-04-18</p>



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: commits-help@xmlgraphics.apache.org


Mime
View raw message