<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3">
<package pkgid="840d44c33c4694f1ac966b20d25d92987481982579a3df3fa274746c3f2a93652e692da7dd458e30e0d95bdc82a78e22b173e82a43d37f87077f38f4a03a2ff4" name="python-pypdf" arch="src">
  <version epoch="0" ver="6.14.2" rel="51.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1726228800">- Add missing Requires on typing_extensions for Python 3.10.
- Correct fdupes macro call.
- Add an empty %check section to silence rpmlint.</changelog>
  <changelog author="Caroline Sena &lt;caroline.sena@suse.com&gt;" date="1727265600">- Update to 4.3.1:
  * Bug Fixes: Cope with Matrix entry in field annotations (#2736)
  * Robustness: Cope with fields with upside down box/rectangle (#2729)
  * Maintenance: Add deprecate_with_replacement to
    StreamObject.initializeFromD… (#2728);
    Deal with cryptography&gt;=43 moving ARC4 (#2765)</changelog>
  <changelog author="Felix Stegmeier &lt;felix.stegmeier@suse.com&gt;" date="1741953600">- Update to 5.3.1:
  * Use the correct name StandardEncoding for the predefined cmap (#3156) by @stefan6419846
  * Handle inline images containing EI sequences (#3152) by @stefan6419846
  * Fix check box value which should be name object (#3124) by @stefan6419846
  * Fix stream position on inline image fallback extraction (#3120) by @stefan6419846
  * Fix object count for incremental writer (#3117) by @m32</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1755172800">- Update to 6.0.0 (bsc#1248089, CVE-2025-55197)
  * security: Limit decompressed size for FlateDecode filter
  * Stop testing on Python 3.8 and start testing on Python 3.14
  * Allow writing/updating all properties of an embedded file
  * Modernize license specifiers
  * Performance optimization for LZW decoding
  * Add PDF/A XMP metadata support
  * Add basic support for JBIG2 by using jbig2dec</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760097600">- update to 6.1.1:
  * Insert new embedded files in a sorted manner
  * Fix name tree handling for embedded files with Kids-based
    inputs
  * Make embedding files not break PDF/A-3 compliance
  * Document AFRelationship handling for PDF/A and provide
    constants
  * Enhance XMP metadata handling with creation and setter
    methods
  * Add all font metrics for base 14 Type 1 PDF fonts
  * Allow deleting embedded files
  * Add support for Python in FIPS mode for document identifier
  * Fix handling of UTF-16 encoded destination titles
  * Guard empty input to prevent IndexError
  * Fix type hint for XMP metadata setter to add bytes type</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1761220800">- Update to 6.1.3 (fixes CVE-2025-62707, bsc#1252507, CVE-2025-62708, bsc#1252533)
  * Allow limiting size of LZWDecode streams (#3502) by @stefan6419846
  * Avoid infinite loop when reading broken DCT-based inline images
    (#3501) by @stefan6419846
  * PageObject.scale() scales media box incorrectly (#3489) by @Nid01
  * Fail with explicit exception when image mode is an empty array
    (#3500) by @stefan6419846
- Update to 6.1.2
  * Fix handling of zero-length StreamObject (#3485) by @Likend
  * Deal with wrong size for incremental PDF files (#3495) by @stefan6419846
  * Improve handling for malformed cross-reference tables
    (#3483) by @stefan6419846
  * Use released Python 3.14 by @stefan6419846
  * Use Mapping instead of dict in type hint of update_page_form_field_values
    (#3490) by @stefan6419846</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1762862400">- update to 6.2.0:
  * Add 'strict' parameter to PDFWriter
  * PdfWriter.append fails when there are articles being None
  * Execute docs examples in CI</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1764158400">- Update to 6.4.0 (fixes CVE-2025-66019, bsc#1254248)
  * Reduce default limit for LZW decoding
  * Parse and format comb fields in text widget annotations
  * Silently ignore Adobe Ascii85 whitespace for suffix detection
- Update to 6.3.0
  * Wrap and align text in flattened PDF forms
  * Fix missing "PreventGC" when cloning
  * Preserve JPEG image quality by default</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1768219200">- Update to 6.6.0 (bsc#1256463, CVE-2026-22690, bsc#1256464, CVE-2026-22691)
  * Limit jbig2dec memory usage
  * FontDescriptor: Initiate from embedded font resource
  * Allow fallback to PBM files for jbig2dec without PNG support
  * Use warning instead of error for early EOD for RunLengthDecode
  * Test with macOS as well
  * Improve handling of partially broken PDF files
  * Block common page content modifications when assigned to reader
  * Embellishments to generated text appearance streams
  * Avoid empty FlateDecode outputs without warning
  * Fix compatibility with Pillow &gt;= 12.1.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769428800">- update to 6.6.1:
  * `/AcroForm` might be NullObject
  * Handle missing font bounding boxes gracefully</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769601600">- update to 6.6.2 (bsc#1257385, CVE-2026-24688):
  * Detect cyclic references when retrieving outlines</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1771502400">- update to 6.7.1 (bsc#1258691, bsc#1258692, bsc#1258693, CVE-2026-27024, CVE-2026-27025, CVE-2026-27026)
  * Deprecate support for abbreviations in decode_stream_data
  * Add ability to add font resources for 14 Adobe Core fonts in text
    widget annotations
  * Avoid invalid load for ICCBased FlateDecode images in mode 1
  * Fix AESV2 decryption when /Length missing in encrypt dict
  * Fix merging when annotations point to NullObject
  * Check for self._info being None in compress_identical_objects
  * Detect cyclic references when accessing TreeObject.children
  * Limit size of /ToUnicode entries
  * Limit FlateDecode recovery attempts
  * Avoid own object replacement logic in PageObject.replace_contents
  * Fix UnboundLocalError when update_page_form_field_values with /Sig
  * Avoid divison by zero when decoding FlateDecode PNG prediction</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1772452800">- update to 6.7.5 (bsc#1259061, CVE-2026-28351, bsc#1258934, CVE-2026-27888, bsc#1258940, CVE-2026-27628)
  * prevent infinite loop from circular xref /Prev references
  * Fix wrong LUT size error
  * Fix handling of page boxes defined on /Pages
  * Use zlib decompression limit when retrieving XFA data
  * Allow limiting output length for RunLengthDecode filter
  * Deal with invalid annotations in extract_links
  * Improve the performance of the ASCIIHexDecode filter</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1773230400">- Update to 6.8.0 (CVE-2026-31826, bsc#1259508)
  * Limit allowed /Length value of stream
  * Add /IRT (in-reply-to) support for markup annotations
  * Avoid using PageObject.replace_contents on PdfReader
  * Document how to disable jbig2dec calls</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1774008000">- Update to 6.9.1 (bsc#1259992, CVE-2026-33123)
  * Improve performance and limit length of array-based content streams
  * Expose /Perms verification result on Encryption object
  * Fix O(n²) performance in NameObject read/write
  * Batch-parse all objects in ObjStm on first access
  * Avoid sharing array-based content streams between pages
  * Avoid accessing invalid page when inserting blank page under some conditions</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1774872000">- Update to 6.9.2 (bsc#1260882, CVE-2026-33699)
  * Avoid infinite loop in read_from_stream for broken files
  * Resolve UnboundLocalError for xobjs in _get_image
- Remove unneeded BuildRequires on setuptools/wheel.
- Run the testsuite.</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1776686400">- Update to 6.10.2 (bsc#1262675, CVE-2026-41312, bsc#1262670, CVE-2026-41313, bsc#1262669, CVE-2026-41314)
  * Do not rely on possibly invalid /Size for incremental cloning
  * Introduce limits for FlateDecode parameters and image decoding
- 6.10.1 (bsc#1262676, CVE-2026-41168)
  * Limit the allowed size of xref and object streams
  * Consider strict mode setting for decryption errors
  * Use new parameter names for compress_identical_objects
- 6.10.0 (bsc#1262284, CVE-2026-40260)
  * Disallow custom XML entity declarations for XMP metadata
  * Skip MD5 key derivation for AES-256 encrypted PDFs
  * Use remove_orphans in compress_identical_objects
  * Fix PdfReadError when xref table contains comments before trailer
  * Correctly verify AES padding during decryption
  * Fix stale object cache from non-authoritative object streams
  * Fix extract_links pairing when annotations include non-links
  * Add AI policy</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1780920000">- Update to 6.13.0
  (CVE-2026-48155, bsc#1266823, CVE-2026-48156, bsc#1266822,
  CVE-2026-48735, bsc#1266821)
  [#] Security (SEC)
  - Avoid infinite loops for outlines and text extraction (#3830)
  [#] New Features (ENH)
  - Add Japanese predefined CMaps (#3800)
  - Font: Collect all character widths, not only those that can be
    unicode mapped (#3798)
  [#] Robustness (ROB)
  - Recover a corrupt trailing startxref pointer (closes #3238) (#3826)
  - Handle /Pages node without /Kids during flattening (#3825)
  - Accept inline image EI marker at the end of a content stream (#3827)
  [#] Maintenance (MAINT)
  - Type the always-raising deprecation helpers as `NoReturn` (#3819)
- 6.12.2:
  [#] Security (SEC)
  - Optimize _decode_png_prediction regarding memory and speed (#3806)
  - Improve loop control in text extraction (#3805)
- 6.12.1:
  [#] Security (SEC)
  - Limit input size and element count for XMP metadata (#3796)
  [#] Robustness (ROB)
  - Prevent cyclic parent hierarchies for inherited dictionaries (#3795)
  - Deal with invalid first code in LZW decoder (#3794)
- 6.12.0:
  [#] Security (SEC)
  - Disallow cross-reference streams with zero-only width values (#3791)
  - Avoid excessive whitespace in layout mode text extraction (#3790)
  [#] New Features (ENH)
  - Implement SASLprep (RFC 4013) for AES-256 password normalization (#3780)
  - CID font resource from font file to encode more characters (#3652)
  [#] Performance Improvements (PI)
  - Optimize retrieval of named destinatinos in reader (#3442)
  [#] Bug Fixes (BUG)
  - Fix TreeObject.insert_child KeyError on fresh children (#3786)
  [#] Robustness (ROB)
  - AppearanceStream: Also honor user-set font name when not
    flattening annotations (#3781)
  [#] Documentation (DOC)
  - Block encrypting writer in incremental mode (#3789)
- 6.11.0:
  [#] New Features (ENH)
  - Initialise a Font from an embedded font file (#3704)
  [#] Robustness (ROB)
  - Allow to fix AES padding length in non-strict mode (#3742)
  [#] Developer Experience (DEV)
  - Enable PyPy testing again (#3752)
  - Align mypy Makefile target with strict mode (#3690)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1782216000">- Update to 6.14.0 (CVE-2026-59937, bsc#1271147, CVE-2026-59938, bsc#1271148)
  * Apply general limit for requested image size
  * Speed up recovery when reading broken cross-reference table
  6.13.3
  * Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well
  6.13.2
  * Detect multi-hop cyclic /Pages trees in _flatten to prevent SIGSEGV
  6.13.1 (bsc#1268787, CVE-2026-54651)
  * Prevent infinite loops when processing threads/articles</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1783598400">- Update to 6.14.2 (CVE-2026-59935, bsc#1271145)
  * Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline
    images
  6.14.1 (CVE-2026-59936, bsc#1271146)
  * Detect end of stream during inline image end marker detection</changelog>
</package>
<package pkgid="83d2050b4ceeca90c4710aa6a631b096fbb772b091f1cb3e8d78a804e2535e02659f76620b081376e4d1f76a15ce4c8811e7163e61186f7907bf7dedae0ce33d" name="python313-pypdf" arch="noarch">
  <version epoch="0" ver="6.14.2" rel="51.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1726228800">- Add missing Requires on typing_extensions for Python 3.10.
- Correct fdupes macro call.
- Add an empty %check section to silence rpmlint.</changelog>
  <changelog author="Caroline Sena &lt;caroline.sena@suse.com&gt;" date="1727265600">- Update to 4.3.1:
  * Bug Fixes: Cope with Matrix entry in field annotations (#2736)
  * Robustness: Cope with fields with upside down box/rectangle (#2729)
  * Maintenance: Add deprecate_with_replacement to
    StreamObject.initializeFromD… (#2728);
    Deal with cryptography&gt;=43 moving ARC4 (#2765)</changelog>
  <changelog author="Felix Stegmeier &lt;felix.stegmeier@suse.com&gt;" date="1741953600">- Update to 5.3.1:
  * Use the correct name StandardEncoding for the predefined cmap (#3156) by @stefan6419846
  * Handle inline images containing EI sequences (#3152) by @stefan6419846
  * Fix check box value which should be name object (#3124) by @stefan6419846
  * Fix stream position on inline image fallback extraction (#3120) by @stefan6419846
  * Fix object count for incremental writer (#3117) by @m32</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1755172800">- Update to 6.0.0 (bsc#1248089, CVE-2025-55197)
  * security: Limit decompressed size for FlateDecode filter
  * Stop testing on Python 3.8 and start testing on Python 3.14
  * Allow writing/updating all properties of an embedded file
  * Modernize license specifiers
  * Performance optimization for LZW decoding
  * Add PDF/A XMP metadata support
  * Add basic support for JBIG2 by using jbig2dec</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760097600">- update to 6.1.1:
  * Insert new embedded files in a sorted manner
  * Fix name tree handling for embedded files with Kids-based
    inputs
  * Make embedding files not break PDF/A-3 compliance
  * Document AFRelationship handling for PDF/A and provide
    constants
  * Enhance XMP metadata handling with creation and setter
    methods
  * Add all font metrics for base 14 Type 1 PDF fonts
  * Allow deleting embedded files
  * Add support for Python in FIPS mode for document identifier
  * Fix handling of UTF-16 encoded destination titles
  * Guard empty input to prevent IndexError
  * Fix type hint for XMP metadata setter to add bytes type</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1761220800">- Update to 6.1.3 (fixes CVE-2025-62707, bsc#1252507, CVE-2025-62708, bsc#1252533)
  * Allow limiting size of LZWDecode streams (#3502) by @stefan6419846
  * Avoid infinite loop when reading broken DCT-based inline images
    (#3501) by @stefan6419846
  * PageObject.scale() scales media box incorrectly (#3489) by @Nid01
  * Fail with explicit exception when image mode is an empty array
    (#3500) by @stefan6419846
- Update to 6.1.2
  * Fix handling of zero-length StreamObject (#3485) by @Likend
  * Deal with wrong size for incremental PDF files (#3495) by @stefan6419846
  * Improve handling for malformed cross-reference tables
    (#3483) by @stefan6419846
  * Use released Python 3.14 by @stefan6419846
  * Use Mapping instead of dict in type hint of update_page_form_field_values
    (#3490) by @stefan6419846</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1762862400">- update to 6.2.0:
  * Add 'strict' parameter to PDFWriter
  * PdfWriter.append fails when there are articles being None
  * Execute docs examples in CI</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1764158400">- Update to 6.4.0 (fixes CVE-2025-66019, bsc#1254248)
  * Reduce default limit for LZW decoding
  * Parse and format comb fields in text widget annotations
  * Silently ignore Adobe Ascii85 whitespace for suffix detection
- Update to 6.3.0
  * Wrap and align text in flattened PDF forms
  * Fix missing "PreventGC" when cloning
  * Preserve JPEG image quality by default</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1768219200">- Update to 6.6.0 (bsc#1256463, CVE-2026-22690, bsc#1256464, CVE-2026-22691)
  * Limit jbig2dec memory usage
  * FontDescriptor: Initiate from embedded font resource
  * Allow fallback to PBM files for jbig2dec without PNG support
  * Use warning instead of error for early EOD for RunLengthDecode
  * Test with macOS as well
  * Improve handling of partially broken PDF files
  * Block common page content modifications when assigned to reader
  * Embellishments to generated text appearance streams
  * Avoid empty FlateDecode outputs without warning
  * Fix compatibility with Pillow &gt;= 12.1.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769428800">- update to 6.6.1:
  * `/AcroForm` might be NullObject
  * Handle missing font bounding boxes gracefully</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769601600">- update to 6.6.2 (bsc#1257385, CVE-2026-24688):
  * Detect cyclic references when retrieving outlines</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1771502400">- update to 6.7.1 (bsc#1258691, bsc#1258692, bsc#1258693, CVE-2026-27024, CVE-2026-27025, CVE-2026-27026)
  * Deprecate support for abbreviations in decode_stream_data
  * Add ability to add font resources for 14 Adobe Core fonts in text
    widget annotations
  * Avoid invalid load for ICCBased FlateDecode images in mode 1
  * Fix AESV2 decryption when /Length missing in encrypt dict
  * Fix merging when annotations point to NullObject
  * Check for self._info being None in compress_identical_objects
  * Detect cyclic references when accessing TreeObject.children
  * Limit size of /ToUnicode entries
  * Limit FlateDecode recovery attempts
  * Avoid own object replacement logic in PageObject.replace_contents
  * Fix UnboundLocalError when update_page_form_field_values with /Sig
  * Avoid divison by zero when decoding FlateDecode PNG prediction</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1772452800">- update to 6.7.5 (bsc#1259061, CVE-2026-28351, bsc#1258934, CVE-2026-27888, bsc#1258940, CVE-2026-27628)
  * prevent infinite loop from circular xref /Prev references
  * Fix wrong LUT size error
  * Fix handling of page boxes defined on /Pages
  * Use zlib decompression limit when retrieving XFA data
  * Allow limiting output length for RunLengthDecode filter
  * Deal with invalid annotations in extract_links
  * Improve the performance of the ASCIIHexDecode filter</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1773230400">- Update to 6.8.0 (CVE-2026-31826, bsc#1259508)
  * Limit allowed /Length value of stream
  * Add /IRT (in-reply-to) support for markup annotations
  * Avoid using PageObject.replace_contents on PdfReader
  * Document how to disable jbig2dec calls</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1774008000">- Update to 6.9.1 (bsc#1259992, CVE-2026-33123)
  * Improve performance and limit length of array-based content streams
  * Expose /Perms verification result on Encryption object
  * Fix O(n²) performance in NameObject read/write
  * Batch-parse all objects in ObjStm on first access
  * Avoid sharing array-based content streams between pages
  * Avoid accessing invalid page when inserting blank page under some conditions</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1774872000">- Update to 6.9.2 (bsc#1260882, CVE-2026-33699)
  * Avoid infinite loop in read_from_stream for broken files
  * Resolve UnboundLocalError for xobjs in _get_image
- Remove unneeded BuildRequires on setuptools/wheel.
- Run the testsuite.</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1776686400">- Update to 6.10.2 (bsc#1262675, CVE-2026-41312, bsc#1262670, CVE-2026-41313, bsc#1262669, CVE-2026-41314)
  * Do not rely on possibly invalid /Size for incremental cloning
  * Introduce limits for FlateDecode parameters and image decoding
- 6.10.1 (bsc#1262676, CVE-2026-41168)
  * Limit the allowed size of xref and object streams
  * Consider strict mode setting for decryption errors
  * Use new parameter names for compress_identical_objects
- 6.10.0 (bsc#1262284, CVE-2026-40260)
  * Disallow custom XML entity declarations for XMP metadata
  * Skip MD5 key derivation for AES-256 encrypted PDFs
  * Use remove_orphans in compress_identical_objects
  * Fix PdfReadError when xref table contains comments before trailer
  * Correctly verify AES padding during decryption
  * Fix stale object cache from non-authoritative object streams
  * Fix extract_links pairing when annotations include non-links
  * Add AI policy</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1780920000">- Update to 6.13.0
  (CVE-2026-48155, bsc#1266823, CVE-2026-48156, bsc#1266822,
  CVE-2026-48735, bsc#1266821)
  [#] Security (SEC)
  - Avoid infinite loops for outlines and text extraction (#3830)
  [#] New Features (ENH)
  - Add Japanese predefined CMaps (#3800)
  - Font: Collect all character widths, not only those that can be
    unicode mapped (#3798)
  [#] Robustness (ROB)
  - Recover a corrupt trailing startxref pointer (closes #3238) (#3826)
  - Handle /Pages node without /Kids during flattening (#3825)
  - Accept inline image EI marker at the end of a content stream (#3827)
  [#] Maintenance (MAINT)
  - Type the always-raising deprecation helpers as `NoReturn` (#3819)
- 6.12.2:
  [#] Security (SEC)
  - Optimize _decode_png_prediction regarding memory and speed (#3806)
  - Improve loop control in text extraction (#3805)
- 6.12.1:
  [#] Security (SEC)
  - Limit input size and element count for XMP metadata (#3796)
  [#] Robustness (ROB)
  - Prevent cyclic parent hierarchies for inherited dictionaries (#3795)
  - Deal with invalid first code in LZW decoder (#3794)
- 6.12.0:
  [#] Security (SEC)
  - Disallow cross-reference streams with zero-only width values (#3791)
  - Avoid excessive whitespace in layout mode text extraction (#3790)
  [#] New Features (ENH)
  - Implement SASLprep (RFC 4013) for AES-256 password normalization (#3780)
  - CID font resource from font file to encode more characters (#3652)
  [#] Performance Improvements (PI)
  - Optimize retrieval of named destinatinos in reader (#3442)
  [#] Bug Fixes (BUG)
  - Fix TreeObject.insert_child KeyError on fresh children (#3786)
  [#] Robustness (ROB)
  - AppearanceStream: Also honor user-set font name when not
    flattening annotations (#3781)
  [#] Documentation (DOC)
  - Block encrypting writer in incremental mode (#3789)
- 6.11.0:
  [#] New Features (ENH)
  - Initialise a Font from an embedded font file (#3704)
  [#] Robustness (ROB)
  - Allow to fix AES padding length in non-strict mode (#3742)
  [#] Developer Experience (DEV)
  - Enable PyPy testing again (#3752)
  - Align mypy Makefile target with strict mode (#3690)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1782216000">- Update to 6.14.0 (CVE-2026-59937, bsc#1271147, CVE-2026-59938, bsc#1271148)
  * Apply general limit for requested image size
  * Speed up recovery when reading broken cross-reference table
  6.13.3
  * Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well
  6.13.2
  * Detect multi-hop cyclic /Pages trees in _flatten to prevent SIGSEGV
  6.13.1 (bsc#1268787, CVE-2026-54651)
  * Prevent infinite loops when processing threads/articles</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1783598400">- Update to 6.14.2 (CVE-2026-59935, bsc#1271145)
  * Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline
    images
  6.14.1 (CVE-2026-59936, bsc#1271146)
  * Detect end of stream during inline image end marker detection</changelog>
</package>
<package pkgid="dbdcc88fb0054a97bea506cdb32d4daed5ad5790422cc414360e4b60c633cf48d46a6b0e520a45b1d1afb13fe5b153040aeff78d59048eeddf9583e1c5cd3170" name="python314-pypdf" arch="noarch">
  <version epoch="0" ver="6.14.2" rel="51.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1726228800">- Add missing Requires on typing_extensions for Python 3.10.
- Correct fdupes macro call.
- Add an empty %check section to silence rpmlint.</changelog>
  <changelog author="Caroline Sena &lt;caroline.sena@suse.com&gt;" date="1727265600">- Update to 4.3.1:
  * Bug Fixes: Cope with Matrix entry in field annotations (#2736)
  * Robustness: Cope with fields with upside down box/rectangle (#2729)
  * Maintenance: Add deprecate_with_replacement to
    StreamObject.initializeFromD… (#2728);
    Deal with cryptography&gt;=43 moving ARC4 (#2765)</changelog>
  <changelog author="Felix Stegmeier &lt;felix.stegmeier@suse.com&gt;" date="1741953600">- Update to 5.3.1:
  * Use the correct name StandardEncoding for the predefined cmap (#3156) by @stefan6419846
  * Handle inline images containing EI sequences (#3152) by @stefan6419846
  * Fix check box value which should be name object (#3124) by @stefan6419846
  * Fix stream position on inline image fallback extraction (#3120) by @stefan6419846
  * Fix object count for incremental writer (#3117) by @m32</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1755172800">- Update to 6.0.0 (bsc#1248089, CVE-2025-55197)
  * security: Limit decompressed size for FlateDecode filter
  * Stop testing on Python 3.8 and start testing on Python 3.14
  * Allow writing/updating all properties of an embedded file
  * Modernize license specifiers
  * Performance optimization for LZW decoding
  * Add PDF/A XMP metadata support
  * Add basic support for JBIG2 by using jbig2dec</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760097600">- update to 6.1.1:
  * Insert new embedded files in a sorted manner
  * Fix name tree handling for embedded files with Kids-based
    inputs
  * Make embedding files not break PDF/A-3 compliance
  * Document AFRelationship handling for PDF/A and provide
    constants
  * Enhance XMP metadata handling with creation and setter
    methods
  * Add all font metrics for base 14 Type 1 PDF fonts
  * Allow deleting embedded files
  * Add support for Python in FIPS mode for document identifier
  * Fix handling of UTF-16 encoded destination titles
  * Guard empty input to prevent IndexError
  * Fix type hint for XMP metadata setter to add bytes type</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1761220800">- Update to 6.1.3 (fixes CVE-2025-62707, bsc#1252507, CVE-2025-62708, bsc#1252533)
  * Allow limiting size of LZWDecode streams (#3502) by @stefan6419846
  * Avoid infinite loop when reading broken DCT-based inline images
    (#3501) by @stefan6419846
  * PageObject.scale() scales media box incorrectly (#3489) by @Nid01
  * Fail with explicit exception when image mode is an empty array
    (#3500) by @stefan6419846
- Update to 6.1.2
  * Fix handling of zero-length StreamObject (#3485) by @Likend
  * Deal with wrong size for incremental PDF files (#3495) by @stefan6419846
  * Improve handling for malformed cross-reference tables
    (#3483) by @stefan6419846
  * Use released Python 3.14 by @stefan6419846
  * Use Mapping instead of dict in type hint of update_page_form_field_values
    (#3490) by @stefan6419846</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1762862400">- update to 6.2.0:
  * Add 'strict' parameter to PDFWriter
  * PdfWriter.append fails when there are articles being None
  * Execute docs examples in CI</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1764158400">- Update to 6.4.0 (fixes CVE-2025-66019, bsc#1254248)
  * Reduce default limit for LZW decoding
  * Parse and format comb fields in text widget annotations
  * Silently ignore Adobe Ascii85 whitespace for suffix detection
- Update to 6.3.0
  * Wrap and align text in flattened PDF forms
  * Fix missing "PreventGC" when cloning
  * Preserve JPEG image quality by default</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1768219200">- Update to 6.6.0 (bsc#1256463, CVE-2026-22690, bsc#1256464, CVE-2026-22691)
  * Limit jbig2dec memory usage
  * FontDescriptor: Initiate from embedded font resource
  * Allow fallback to PBM files for jbig2dec without PNG support
  * Use warning instead of error for early EOD for RunLengthDecode
  * Test with macOS as well
  * Improve handling of partially broken PDF files
  * Block common page content modifications when assigned to reader
  * Embellishments to generated text appearance streams
  * Avoid empty FlateDecode outputs without warning
  * Fix compatibility with Pillow &gt;= 12.1.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769428800">- update to 6.6.1:
  * `/AcroForm` might be NullObject
  * Handle missing font bounding boxes gracefully</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1769601600">- update to 6.6.2 (bsc#1257385, CVE-2026-24688):
  * Detect cyclic references when retrieving outlines</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1771502400">- update to 6.7.1 (bsc#1258691, bsc#1258692, bsc#1258693, CVE-2026-27024, CVE-2026-27025, CVE-2026-27026)
  * Deprecate support for abbreviations in decode_stream_data
  * Add ability to add font resources for 14 Adobe Core fonts in text
    widget annotations
  * Avoid invalid load for ICCBased FlateDecode images in mode 1
  * Fix AESV2 decryption when /Length missing in encrypt dict
  * Fix merging when annotations point to NullObject
  * Check for self._info being None in compress_identical_objects
  * Detect cyclic references when accessing TreeObject.children
  * Limit size of /ToUnicode entries
  * Limit FlateDecode recovery attempts
  * Avoid own object replacement logic in PageObject.replace_contents
  * Fix UnboundLocalError when update_page_form_field_values with /Sig
  * Avoid divison by zero when decoding FlateDecode PNG prediction</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1772452800">- update to 6.7.5 (bsc#1259061, CVE-2026-28351, bsc#1258934, CVE-2026-27888, bsc#1258940, CVE-2026-27628)
  * prevent infinite loop from circular xref /Prev references
  * Fix wrong LUT size error
  * Fix handling of page boxes defined on /Pages
  * Use zlib decompression limit when retrieving XFA data
  * Allow limiting output length for RunLengthDecode filter
  * Deal with invalid annotations in extract_links
  * Improve the performance of the ASCIIHexDecode filter</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1773230400">- Update to 6.8.0 (CVE-2026-31826, bsc#1259508)
  * Limit allowed /Length value of stream
  * Add /IRT (in-reply-to) support for markup annotations
  * Avoid using PageObject.replace_contents on PdfReader
  * Document how to disable jbig2dec calls</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1774008000">- Update to 6.9.1 (bsc#1259992, CVE-2026-33123)
  * Improve performance and limit length of array-based content streams
  * Expose /Perms verification result on Encryption object
  * Fix O(n²) performance in NameObject read/write
  * Batch-parse all objects in ObjStm on first access
  * Avoid sharing array-based content streams between pages
  * Avoid accessing invalid page when inserting blank page under some conditions</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1774872000">- Update to 6.9.2 (bsc#1260882, CVE-2026-33699)
  * Avoid infinite loop in read_from_stream for broken files
  * Resolve UnboundLocalError for xobjs in _get_image
- Remove unneeded BuildRequires on setuptools/wheel.
- Run the testsuite.</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1776686400">- Update to 6.10.2 (bsc#1262675, CVE-2026-41312, bsc#1262670, CVE-2026-41313, bsc#1262669, CVE-2026-41314)
  * Do not rely on possibly invalid /Size for incremental cloning
  * Introduce limits for FlateDecode parameters and image decoding
- 6.10.1 (bsc#1262676, CVE-2026-41168)
  * Limit the allowed size of xref and object streams
  * Consider strict mode setting for decryption errors
  * Use new parameter names for compress_identical_objects
- 6.10.0 (bsc#1262284, CVE-2026-40260)
  * Disallow custom XML entity declarations for XMP metadata
  * Skip MD5 key derivation for AES-256 encrypted PDFs
  * Use remove_orphans in compress_identical_objects
  * Fix PdfReadError when xref table contains comments before trailer
  * Correctly verify AES padding during decryption
  * Fix stale object cache from non-authoritative object streams
  * Fix extract_links pairing when annotations include non-links
  * Add AI policy</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1780920000">- Update to 6.13.0
  (CVE-2026-48155, bsc#1266823, CVE-2026-48156, bsc#1266822,
  CVE-2026-48735, bsc#1266821)
  [#] Security (SEC)
  - Avoid infinite loops for outlines and text extraction (#3830)
  [#] New Features (ENH)
  - Add Japanese predefined CMaps (#3800)
  - Font: Collect all character widths, not only those that can be
    unicode mapped (#3798)
  [#] Robustness (ROB)
  - Recover a corrupt trailing startxref pointer (closes #3238) (#3826)
  - Handle /Pages node without /Kids during flattening (#3825)
  - Accept inline image EI marker at the end of a content stream (#3827)
  [#] Maintenance (MAINT)
  - Type the always-raising deprecation helpers as `NoReturn` (#3819)
- 6.12.2:
  [#] Security (SEC)
  - Optimize _decode_png_prediction regarding memory and speed (#3806)
  - Improve loop control in text extraction (#3805)
- 6.12.1:
  [#] Security (SEC)
  - Limit input size and element count for XMP metadata (#3796)
  [#] Robustness (ROB)
  - Prevent cyclic parent hierarchies for inherited dictionaries (#3795)
  - Deal with invalid first code in LZW decoder (#3794)
- 6.12.0:
  [#] Security (SEC)
  - Disallow cross-reference streams with zero-only width values (#3791)
  - Avoid excessive whitespace in layout mode text extraction (#3790)
  [#] New Features (ENH)
  - Implement SASLprep (RFC 4013) for AES-256 password normalization (#3780)
  - CID font resource from font file to encode more characters (#3652)
  [#] Performance Improvements (PI)
  - Optimize retrieval of named destinatinos in reader (#3442)
  [#] Bug Fixes (BUG)
  - Fix TreeObject.insert_child KeyError on fresh children (#3786)
  [#] Robustness (ROB)
  - AppearanceStream: Also honor user-set font name when not
    flattening annotations (#3781)
  [#] Documentation (DOC)
  - Block encrypting writer in incremental mode (#3789)
- 6.11.0:
  [#] New Features (ENH)
  - Initialise a Font from an embedded font file (#3704)
  [#] Robustness (ROB)
  - Allow to fix AES padding length in non-strict mode (#3742)
  [#] Developer Experience (DEV)
  - Enable PyPy testing again (#3752)
  - Align mypy Makefile target with strict mode (#3690)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1782216000">- Update to 6.14.0 (CVE-2026-59937, bsc#1271147, CVE-2026-59938, bsc#1271148)
  * Apply general limit for requested image size
  * Speed up recovery when reading broken cross-reference table
  6.13.3
  * Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well
  6.13.2
  * Detect multi-hop cyclic /Pages trees in _flatten to prevent SIGSEGV
  6.13.1 (bsc#1268787, CVE-2026-54651)
  * Prevent infinite loops when processing threads/articles</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1783598400">- Update to 6.14.2 (CVE-2026-59935, bsc#1271145)
  * Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline
    images
  6.14.1 (CVE-2026-59936, bsc#1271146)
  * Detect end of stream during inline image end marker detection</changelog>
</package>
</otherdata>