Changelog:
10.4.0: November 16, 2021
+ Handling of Weak Cryptography Algorithms
o From the qpdf CLI, the --allow-weak-crypto is now required to
suppress a warning when explicitly creating PDF files using RC4
encryption. While qpdf will always retain the ability to read and
write such files, doing so will require explicit acknowledgment
moving forward. For qpdf 10.4, this change only affects the
command-line tool. Starting in qpdf 11, there will be small API
changes to require explicit acknowledgment in those cases as well.
For additional information, see Chapter 6, Weak Cryptography.
+ Bug Fixes
o Fix potential bounds error when handling shell completion that
could occur when given bogus input.
o Properly handle overlay/underlay on completely empty pages (with no
resource dictionary).
o Fix crash that could occur under certain conditions when using
--pages with files that had form fields.
+ Library Enhancements
o Make QPDF::findPage functions public.
o Add methods to Pl_Flate to be able to receive warnings on certain
recoverable conditions.
o Add an extra check to the library to detect when foreign objects
are inserted directly (instead of using QPDF::copyForeignObject) at
the time of insertion rather than when the file is written.
Catching the error sooner makes it much easier to locate the
incorrect code.
+ CLI Enhancements
o Improve diagnostics around parsing --pages command-line options
+ Packaging Changes
o The Windows binary distribution is now built with crypto provided
by OpenSSL 3.0.
805d05738a