SUSE-SU-2024:4054-1

Description of the patch:

This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues:

xmlgraphics-fop was updated from version 2.8 to 2.10:

• Security issues fixed:

  • CVE-2024-28168: Fixed improper restriction of XML External Entity (XXE) reference (bsc#1231428)

• Upstream changes and bugs fixed:

  • Version 2.10:

    • footnote-body ignores rl-tb writing mode
    • SVG tspan content is displayed out of place
    • Added new schema to handle pdf/a and pdfa/ua
    • Correct fop version at runtime
    • NoSuchElementException when using font with no family name
    • Resolve classpath for binary distribution
    • Switch to spotbugs
    • Set an automatic module name
    • Rename packages to avoid conflicts with modules
    • Resize table only for multicolumn page
    • Missing jars in servlet
    • Optimise performance of PNG with alpha using raw loader
    • basic-link not navigating to corresponding footnote
    • Added option to sign PDF
    • Added secure processing for XSL input
    • Allow sections which need security permissions to be run when AllPermission denied in caller code
    • Remove unused PDFStructElem
    • Remove space generated by fo:wrapper
    • Reset content length for table changing ipd
    • Added alt text to PDF signature
    • Allow change of resource level for SVG in AFP
    • Exclude shape not in clipping path for AFP
    • Only support 1 column for redo of layout without page pos only
    • Switch to Jakarta servlet API
    • NPE when list item is split alongside an ipd change
    • Added mandatory MODCA triplet to AFP
    • Redo layout for multipage columns
    • Added image mask option for AFP
    • Skip written block ipds inside float
    • Allow curly braces for src url
    • Missing content for last page with change ipd
    • Added warning when different pdf languages are used
    • Only restart line manager when there is a linebreak for blocklayout

  *...