• Fix some build issues:
  • build with libxml >= 2.12
  • CMake debug build with MSVC
  • clang warnings
• Minor fix: potential undefined behavior on corrupt input
• Code cleanup

This is mainly bug fix / security release.

• fixed multiple buffer over-reads and null pointer dereferences that can be triggered with crafted input. The security impact of these bugs is low, they can cause crashes. These bugs were identified by extensive fuzzing by various researchers: jimoyong, dupingxin (NSFOCUS Tianji Lab), jieyongma (TDHX ICS Security), cnitlrt, beidasoft-cobot-oss-fuzz, han...

This release focuses on DRM functions:

• adds functions to allow encryption of documents
• improves decryption routines
• adds new tool mobidrm that handles documents encryption and decryption

Other changes:

• adds function to split hybrid files
• adds helper functions for retrieving orthographic index entries
• adds basic CMake support
• small fixes in autotools project

Maintenance release

• fixes configuration scripts creation with Autoconf 2.70 and newer
• fixes MinGW Autotools builds
• fixes out-of-tree (VPATH) builds
• cleans up Autotools files
• quiets compiler warning

Bug fix release

This release fixes two more potential out-of-buffer reads fuzzed by occia (CVE-2021-3881, CVE-2021-3888 , CVE-2021-3889). They can be triggered by corrupt or crafted data.