veraPDF v1.28.2

Version 1.28.2 (July 15, 2025)

Applications

• updated vulnerable dependencies (commit)

Validation

• (PDF/UA-2, WTPDF-1) disabled rule about multiple link annotations that target the same location (commit)
• (PDF/UA-2, WTPDF-1) fixed structure destination validation (commit)
• fixed validation of Unicode for several flavours (commit)

PDF Parser

• fixed width calculation in an edge case of Type2CharString (commit)
• fixed COSPredictorDecode (commits 1 2)
• fixed RDF parsing with no attributes in metadata (commit)
• fixed exceptions in case of malformed PDFs

Maintenance

• moved Maven publication from the decommissioned Sonatype service to Maven central publication
• added the new maven-central-publication plugin to veraPDF-parent POM for publication for all projects (commit)
• updated the Maven plugins used to the latest versions (commit)

Full Changelog: v1.28.1...v1.28.2

veraPDF v1.28.1

Version 1.28 (April 30, 2025)

Applications

• updated izpack to version 5.2.4

Validation

• (PDF/UA-1,2, WTPDF-1, ISO 32005) added rules to require Marked=true entry in MarkInfo dictionary
• (PDF/UA-2, WTPDF-1, ISO 32005) fixed parent-child rules for NonStruct, Part and Div
• (PDF/UA-2, WTPDF-1, ISO 32005) fixed exception during table validation in cases of invalid table structure
• (PDF/UA-2, WTPDF-1) fixed mismatch of structure destinations in Link annotations
• (PDF/UA-2, WTPDF-1) fixed rule about alternative text for signature graphic content with no text
• (PDF/UA-2, WTPDF-1) fixed checking ToggleNoView flag for annotations

PDF Parser

• fixed xref parsing in some exceptional cases and improved error reporting
• fixed parsing of indirect Kids in number tree
• fixed invalid byte range parsing in CMap stream

v1.28.0-RC1

Applications

• added validation for several flavours
• created docker image for veraPDF CLI
• added showing location of config

Validation

• (WTPDF-1) added support for WTPDF Reuse and Accessibility conformance levels
• (PDF/A, PDF/UA) fixes the issue of accepting sometimes string value type if the PDF specification requires name object type
• (PDF/A) fixed validation of Interpolate entry in image mask dictionaries
• (PDF/A-1) updated the rule on compressed XMP Metadata
• (PDF/UA-1) added rule about PDF version
• (PDF/UA-1) fixed recursive propagation of Artifact to untagged Form XObjects
• (PDF/UA-1,2) fixed handing of circular role mappings and namespaces
• (PDF/UA-1,2) permit untagged tilling patterns
• (PDF/UA-2) permit math structure type only within Formula
• (PDF/UA-2) added rule to require Metadata entry in Catalog
• (ISO 32005) updated Div, Part, NonStruct processing to inherit containment rules from the parent
• (ISO 32005) added containment rules for Ruby and Warichu
• (ISO 32005) permitted Sub as a child of Code
• (ISO 32005) fixed rule on content items in StructTreeRoot

PDF Parser

• fixed parsing of empty UTF-16 string
• fixed parsing of CFF fonts with empty Name Index
• updated width calculation for CFFType1 font program with duplicated glyph names
• fixed name calculation for glyph with code 0
• fixed signature EOF logic in incremental updates
• fixed parsing of compressed CIDToGIDMap stream

Core library

• improved performance
• improved logs
• more robust exception handling

Corpus

• updated PDF/A-4 and PDF/UA-2 test corpus
• added WTPDF declarations to PDF/UA-2 test files

Documentation

• improved java docs
• improved policy documentation

veraPDF v1.26.2

Version 1.26.2 (December 4, 2024)

Applications

• fixed CVE-2024-52800

veraPDF v1.26.1

Version 1.26 (May 16, 2024)

Validation

• (PDF/UA-2) added support for PDF/UA-2 (draft)
• (PDF/UA-1) detect and report structure elements with missing parent
• (PDF/UA-1) fixed checks related to role maps between standard and non-standard tags
• (PDF/UA-1) fixed rules related to annotations in structure tree
• (PDF/UA-1) added checks for XMP prefixes in the identification metadata
• (PDF/A-1,2,3,4) added check for valid values of BitsPerComponent
• (PDF/A-2,3,4) apply the rule on identical tint transform also to /All and /None
• (PDF/A-1) added check that the document does not use xref stream
• (PDF/A-1) Fix syncing XMP with Info dictionary in case of multiple creators
• (PDF/UA-2) supported named structured destinations in goto actions
• (PDF/UA-1) fixed rules about annotations
• (PDF/UA-2) include ISO 32005 rules to PDF/UA-2 profile
• (PDF/UA-2) added rule about Ref entry of Note structure element
• (PDF/UA-2) supported validation of Open Action destination
• (PDF/UA-2) disabled ActualText and Alt validation for non-real content
• (PDF/UA-2) fixed checking of role mapping structure types to the same namespace

Applications

• set secure parameter for xslt transformation (CVE-2024-28109)
• improved multithreading performance of JavaScript evaluation
• Improved REST API: more logical endpoints, documentation, web demo page, automatic deployment of the docker image to DockerHub.com
• Redesigned main GUI window
• Improved CLI output (help, debug logs, text report, JSON report formatting)
• Improved XML report schema in case of exceptions
• Fixed GUI check for the availability of a newer version

Core library

• added support for Java 21

PDF Model

• Cleanup of the unused properties and links

PDF Parser

• fixed MathML parsing exception
• added warning for duplicated MCID in content stream
• fixed CIDFontType2 font program parsing for OpenType fonts
• fixed ROS operator finding for CFF fonts
• Updated predefined CMaps
• Added support for structure attributes defined via ClassMap
• Fixed parsing of inline images of undefined length
• Detect and generate a warning when dictionary contains duplicated keys
• Detect and generate a warning when the embedded font has duplicated glyph names
• Detect and generate a warning in case of loops in document structure tree
• Fixed decryption of string objects
• Fix default whitepoint for CIELab in JPEG2000
• Optimized use of temporary files

v1.26.0-RC2

What's Changed

Applications

• set secure parameter for xslt transformation (CVE-2024-28109)
• improved multithreading performance of JavaScript evaluation

Core library

• added support for Java 21

PDF Parser

• fixed MathML parsing exception
• added warning for duplicated MCID in content stream
• fixed CIDFontType2 font program parsing for OpenType fonts
• fixed ROS operator finding for CFF fonts

Validation

• (PDF/UA-2) include ISO 32005 rules to PDF/UA-2 profile
• (PDF/UA-2) added rule about Ref entry of Note structure element
• (PDF/UA-2) supported validation of Open Action destination
• (PDF/UA-2) disabled ActualText and Alt validation for non-real content
• (PDF/UA-2) fixed checking of role mapping structure types to the same namespace

veraPDF v1.24.2

What's Changed

• REL 1.24 - Set secure parameter for xslt transformation by @MaximPlusov in #1422

Full Changelog: v1.24.1...v1.24.2

v1.26.0 RC

CHANGES

Applications

• Improved REST API: more logical endpoints, documentation, web demo page, automatic deployment of the docker image to DockerHub.com
• Redesigned main GUI window
• Improved CLI output (help, debug logs, text report, JSON report formatting)
• Improved XML report schema in case of exceptions
• Fixed GUI check for the availability of a newer version

PDF Model

• Cleanup of the unused properties and links

PDF Parser

• Updated predefined CMaps
• Added support for structure attributes defined via ClassMap
• Fixed parsing of inline images of undefined length
• Detect and generate a warning when dictionary contains duplicated keys
• Detect and generate a warning when the embedded font has duplicated glyph names
• Detect and generate a warning in case of loops in document structure tree
• Fixed decryption of string objects
• Fix default whitepoint for CIELab in JPEG2000
• Optimized use of temporary files

Validation

• (PDF/UA-2) added partial support for PDF/UA-2 (draft) by implementing the checks that can be performed by software according to the Matterhorn Protocol
• (PDF/UA-1) detect and report structure elements with missing parent
• (PDF/UA-1) fixed checks related to role maps between standard and non-standard tags
• (PDF/UA-1) fixed rules related to annotations in structure tree
• (PDF/UA-1) added checks for XMP prefixes in the identification metadata
• (PDF/A-1,2,3,4) added check for valid values of BitsPerComponent
• (PDF/A-2,3,4) apply the rule on identical tint transform also to /All and /None
• (PDF/A-1) added check that the document does not use xref stream
• (PDF/A-1) Fix syncing XMP with Info dictionary in case of multiple creators

veraPDF v1.24.1

Version 1.24 (June 28, 2023)

Applications

• added support for recursive processing of PDF files in ZIP archives
• revised and upgraded plug-ins included into the installation bundle
• added Cancel button in GUI to cancel the job
• added new --progress parameter in CLI to report progress info
• added new --config parameter in CLI to support config file as a new CLI argument
• renamed xml report format option to raw in CLI (xml is now reserved for the default report format)
• enchanced validation error messages and their variable data
• support feature report in json format
• added warnings on incompatible CLI arguments
• fixed saving GUI application settings
• fixed getting log level from the config file
• fixed handling of malformed config files

PDF model

• added new property nestingLevel to Hn structure element
• added new properties firstPageIDValue and lastIDValue to COSDocument
• refactored the properties of XMP and Info dictionary metadata
• refactored the properties for Table structure elements
• added a new property XMPCreatorSize for the number of creators

PDF Parser

• added method to check for an ascii-string
• updated predefined CMaps
• fixed parsing hybrid PDFs
• fixed decoding Flate filters with invalid checksum
• fixed issue with duplicated short and long keys in inline image dictionaries
• added warning for Page objects with missing resources dictionary
• added support for PDF 2.0 namespace and PDF 2.0 standard structure elements
• fixes of unhandled exceptions in malicious PDFs
• fix of the CIDSet parsing for embedded OpenType fonts
• updated regex for PDF Date to support border cases
• added warning in case of invalid Version entry in the catalog
• fixed an issue of accepting String value types where Name type is required and vice versa

Validation

• (PDF/UA-1) fixed validating TU entry in form fields with multiple Widget annotations
• (PDF/UA-1) refactored Table validation rules
• (PDF/UA-1) added a new rule to check for presence of StructTreeRoot entry in the document catalog
• (PDF/A-2,3,4) fixed issue with false negative for CMYK-based JPEG2000 images in presence of DefaultCMYK color space
• (PDF/A-1,2,3,4) refactored and enchanced metadata fixer functionality
• (PDF/A-2,3,4) permit empty Name for the optional content configuration dictionary
• (PDF/A-2,3,4) fixed validation of circular role mapping
• (PDF/A-1,2,3) updated rules ids to match the exact location of the corresponding "shall" clause in the specification
• (PDF/A-1) fixed comparison of Info dictionary Author and XMP dc:creator in case of multiple authors/creators
• (PDF/A-2,3,4) fixed handling of Default color spaces for DeviceN colorants
• (PDF/UA-1) reverted Table Scope determination algorithm from PDF 2.0 to PDF 1.7

Core library

• added support for jakarta and Spring Boot 3 (Java 11+ only)
• fixed output encoding of all logs and reports to be UTF8 (independently of locale)

Full Changelog: v1.22.3...v1.24.1

v1.24.0-RC3

Version 1.24 RC2 (June 2, 2023)

PDF model

• added a new property XMPCreatorSize for the number of creators

PDF Parser

• fixes of unhandled exceptions in malicious PDFs
• fix of the CIDSet parsing for embedded OpenType fonts
• updated regex for PDF Date to support border cases
• added warning in case of invalid Version entry in the catalog
• fixed an issue of accepting String value types where Name type is required and vice versa

Validation

• (PDF/A-1) fixed comparison of Info dictionary Author and XMP dc:creator in case of multiple authors/creators
• (PDF/A-2,3,4) fixed handling of Default color spaces for DeviceN colorants
• (PDF/UA-1) reverted Table Scope determination algorithm from PDF 2.0 to PDF 1.7