Comment # 1 on bug 1231058 from Stefan Hundhammer

% osc maintainer -e podofo

Defined in project:  graphics
  bugowner of podofo : 
   -

  maintainer of podofo : 
   adrian.schroeter@suse.com, meissner@suse.com, postadal@suse.com,
stefan.bruens@rwth-aachen.de, opensuse@freisturz.de, opensuse@dstoecker.de,
jsmeix@suse.com, werner@suse.com, mseben@gmail.com, toganm@dinamizm.com,
Torsten.Paul@gmx.de, jubalh@iodoru.org, -


https://build.opensuse.org/projects/openSUSE:Factory/packages/podofo/files/podofo.changes?expand=1

>> -------------------------------------------------------------------
>> Sun Sep  8 07:50:21 UTC 2024 - Cliff Zhao <qzhao@suse.com>
>> 
>> - Add podofo-CVE-2019-20093.patch:
>>   Backport from upstream proposed fix, Fix denial of service
>>   (NULL pointer dereference) in PoDoFo::PdfVariant::DelayedLoad
>>   function in PdfVariant.h.
>>   https://sourceforge.net/p/podofo/tickets/75/
>>   (CVE-2019-20093, bsc#1159921)
>> 
>> -------------------------------------------------------------------
>> Sat Sep  7 17:53:18 UTC 2024 - Cliff Zhao <qzhao@suse.com>
>> 
>> - update to 0.10.4:
>>   * StandardStreamDevice: Fixed seek() in case of iostream/fstream
>>   * PdfWriter: Fixed computing the doc identifier with a wrong buffer
>>   * PdfPainter: Fix SetCurrentMatrix() to really update CTM
>>   * Fixed compilation in mingw < 12
>>   * PdfCIDToGIDMap: Fixed map reading
>>   * PdfPainter: Fixed offset on multiline text if text is not left aligned
>> 
>>