You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by Andreas Lehmkuehler <an...@lehmi.de> on 2021/07/11 11:11:46 UTC
Apache PDFBox Board Report July 2021 due
Hi,
find attached a quick draft of the board report we're expected to submit this
month. It's based upon the report wizard template which can be found at [1]
Any comments or additions are appreciated ...
<draft>
## Description:
The mission of PDFBox is the creation and maintenance of software related to
Java library for working with PDF documents
## Issues:
There are no issues requiring board attention at this time. Some bugs were
reported via security@apache.org and 2 of them ended up in a CVE. Both were
solved in 2.0.24.
- CVE-2021-31811: A carefully crafted PDF file can trigger an
OutOfMemory-Exception while loading a tiny file
- CVE-2021-31812: A carefully crafted PDF file can trigger an infinite loop
while loading the file
The credits goes to Chaoyuan Peng
## Membership Data:
Apache PDFBox was founded 2009-10-21 (12 years ago)
There are currently 21 committers and 21 PMC members in this project.
The Committer-to-PMC ratio is 1:1.
Community changes, past quarter:
- No new PMC members. Last addition was Matthäus Mayer on 2017-10-16.
- No new committers. Last addition was Joerg O. Henne on 2017-10-09.
## Project Activity:
Recent releases:
2.0.24 was released on 2021-06-10.
3.0.0-RC1 was released on 2021-04-01
2.0.23 was released on 2021-03-18.
2.0.22 was released on 2020-12-19.
## Community Health:
- there is a steady stream of contributions, bug reports and questions on the
mailing lists
- there are a lot of refactorings, improvements and bugfixes
- we are working on the second alpha version of the upcoming new major release
3.0.0
- we decided to retire the subproject Preflight with 4.0.0 as it is
practically not maintained and the supported features are limited. VeraPDF
is one good alternative. It has more to offer and is open source. And by the
way it is based on a PDFBox fork.
</draft>
Andreas
[1] https://reporter.apache.org/wizard/?pdfbox
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org
Re: Apache PDFBox Board Report July 2021 due
Posted by Andreas Lehmkuehler <an...@lehmi.de>.
Hi,
I've submitted the report as is.
Thanks for the review.
Andreas
Am 11.07.21 um 13:11 schrieb Andreas Lehmkuehler:
> Hi,
>
> find attached a quick draft of the board report we're expected to submit this
> month. It's based upon the report wizard template which can be found at [1]
>
> Any comments or additions are appreciated ...
>
> <draft>
>
> ## Description:
> The mission of PDFBox is the creation and maintenance of software related to
> Java library for working with PDF documents
>
> ## Issues:
> There are no issues requiring board attention at this time. Some bugs were
> reported via security@apache.org and 2 of them ended up in a CVE. Both were
> solved in 2.0.24.
>
> - CVE-2021-31811: A carefully crafted PDF file can trigger an
> OutOfMemory-Exception while loading a tiny file
> - CVE-2021-31812: A carefully crafted PDF file can trigger an infinite loop
> while loading the file
>
> The credits goes to Chaoyuan Peng
>
> ## Membership Data:
> Apache PDFBox was founded 2009-10-21 (12 years ago)
> There are currently 21 committers and 21 PMC members in this project.
> The Committer-to-PMC ratio is 1:1.
>
> Community changes, past quarter:
> - No new PMC members. Last addition was Matthäus Mayer on 2017-10-16.
> - No new committers. Last addition was Joerg O. Henne on 2017-10-09.
>
> ## Project Activity:
> Recent releases:
> 2.0.24 was released on 2021-06-10.
> 3.0.0-RC1 was released on 2021-04-01
> 2.0.23 was released on 2021-03-18.
> 2.0.22 was released on 2020-12-19.
>
> ## Community Health:
> - there is a steady stream of contributions, bug reports and questions on the
> mailing lists
> - there are a lot of refactorings, improvements and bugfixes
> - we are working on the second alpha version of the upcoming new major release
> 3.0.0
> - we decided to retire the subproject Preflight with 4.0.0 as it is
> practically not maintained and the supported features are limited. VeraPDF
> is one good alternative. It has more to offer and is open source. And by the
> way it is based on a PDFBox fork.
>
> </draft>
>
> Andreas
>
> [1] https://reporter.apache.org/wizard/?pdfbox
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
> For additional commands, e-mail: dev-help@pdfbox.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org
Re: Apache PDFBox Board Report July 2021 due
Posted by Tilman Hausherr <TH...@t-online.de>.
+1
Tilman
Am 11.07.2021 um 13:11 schrieb Andreas Lehmkuehler:
> Hi,
>
> find attached a quick draft of the board report we're expected to
> submit this
> month. It's based upon the report wizard template which can be found
> at [1]
>
> Any comments or additions are appreciated ...
>
> <draft>
>
> ## Description:
> The mission of PDFBox is the creation and maintenance of software
> related to
> Java library for working with PDF documents
>
> ## Issues:
> There are no issues requiring board attention at this time. Some bugs
> were
> reported via security@apache.org and 2 of them ended up in a CVE. Both
> were
> solved in 2.0.24.
>
> - CVE-2021-31811: A carefully crafted PDF file can trigger an
> OutOfMemory-Exception while loading a tiny file
> - CVE-2021-31812: A carefully crafted PDF file can trigger an infinite
> loop
> while loading the file
>
> The credits goes to Chaoyuan Peng
>
> ## Membership Data:
> Apache PDFBox was founded 2009-10-21 (12 years ago)
> There are currently 21 committers and 21 PMC members in this project.
> The Committer-to-PMC ratio is 1:1.
>
> Community changes, past quarter:
> - No new PMC members. Last addition was Matthäus Mayer on 2017-10-16.
> - No new committers. Last addition was Joerg O. Henne on 2017-10-09.
>
> ## Project Activity:
> Recent releases:
> 2.0.24 was released on 2021-06-10.
> 3.0.0-RC1 was released on 2021-04-01
> 2.0.23 was released on 2021-03-18.
> 2.0.22 was released on 2020-12-19.
>
> ## Community Health:
> - there is a steady stream of contributions, bug reports and questions
> on the
> mailing lists
> - there are a lot of refactorings, improvements and bugfixes
> - we are working on the second alpha version of the upcoming new major
> release
> 3.0.0
> - we decided to retire the subproject Preflight with 4.0.0 as it is
> practically not maintained and the supported features are limited.
> VeraPDF
> is one good alternative. It has more to offer and is open source.
> And by the
> way it is based on a PDFBox fork.
>
> </draft>
>
> Andreas
>
> [1] https://reporter.apache.org/wizard/?pdfbox
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
> For additional commands, e-mail: dev-help@pdfbox.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org