You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa php-tcpdf

Sigurnosni nedostatak programskog paketa php-tcpdf

by - 0

——————————————————————————–
Fedora Update Notification
FEDORA-2018-187e212568
2018-10-04 17:15:10.776128
——————————————————————————–

Name : php-tcpdf
Product : Fedora 27
Version : 6.2.25
Release : 1.fc27
URL : http://www.tcpdf.org
Summary : PHP class for generating PDF documents and barcodes
Description :
PHP class for generating PDF documents.

* no external libraries are required for the basic functions;
* all standard page formats, custom page formats, custom margins and units
of measure;
* UTF-8 Unicode and Right-To-Left languages;
* TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0 fonts;
* font subsetting;
* methods to publish some XHTML + CSS code, Javascript and Forms;
* images, graphic (geometric figures) and transformation methods;
* supports JPEG, PNG and SVG images natively, all images supported by GD
(GD, GD2, GD2PART, GIF, JPEG, PNG, BMP, XBM, XPM) and all images supported
via ImagMagick (http: www.imagemagick.org/www/formats.html)
* 1D and 2D barcodes: CODE 39, ANSI MH10.8M-1983, USD-3, 3 of 9, CODE 93,
USS-93, Standard 2 of 5, Interleaved 2 of 5, CODE 128 A/B/C, 2 and 5 Digits
UPC-Based Extention, EAN 8, EAN 13, UPC-A, UPC-E, MSI, POSTNET, PLANET,
RMS4CC (Royal Mail 4-state Customer Code), CBC (Customer Bar Code),
KIX (Klant index – Customer index), Intelligent Mail Barcode, Onecode,
USPS-B-3200, CODABAR, CODE 11, PHARMACODE, PHARMACODE TWO-TRACKS,
Datamatrix ECC200, QR-Code, PDF417;
* ICC Color Profiles, Grayscale, RGB, CMYK, Spot Colors and Transparencies;
* automatic page header and footer management;
* document encryption up to 256 bit and digital signature certifications;
* transactions to UNDO commands;
* PDF annotations, including links, text and file attachments;
* text rendering modes (fill, stroke and clipping);
* multiple columns mode;
* no-write page regions;
* bookmarks and table of content;
* text hyphenation;
* text stretching and spacing (tracking/kerning);
* automatic page break, line break and text alignments including justification;
* automatic page numbering and page groups;
* move and delete pages;
* page compression (requires php-zlib extension);
* XOBject templates;
* PDF/A-1b (ISO 19005-1:2005) support.

By default, TCPDF uses the GD library which is know as slower than ImageMagick
solution. You can optionally install php-pecl-imagick; TCPDF will use it.

——————————————————————————–
Update Information:

**Version 6.2.25** – Fix support for image URLs. —- **Version 6.2.24** –
Support remote urls when checking if file exists. —- **Version 6.2.23** –
Simplify file_exists function. —- **Version 6.2.20** – Fix for security
vulnerability: Using the phar:// wrapper it was possible to trigger the
unserialization of user provided data. —- **Version 6.2.19** – Merge
various fixes for PHP 7.3 compatibility and security.
——————————————————————————–
ChangeLog:

* Mon Sep 24 2018 Remi Collet <remi@remirepo.net> – 6.2.25-1
– update to 6.2.25
* Sat Sep 15 2018 Remi Collet <remi@remirepo.net> – 6.2.22-1
– update to 6.2.22
* Fri Sep 14 2018 Remi Collet <remi@remirepo.net> – 6.2.21-1
– update to 6.2.21
* Fri Sep 14 2018 Remi Collet <remi@remirepo.net> – 6.2.19-1
– update to 6.2.19
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2018-187e212568’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2018-f1ca41a1a6
2018-10-04 20:31:34.484359
——————————————————————————–

Name : php-tcpdf
Product : Fedora 28
Version : 6.2.25
Release : 1.fc28
URL : http://www.tcpdf.org
Summary : PHP class for generating PDF documents and barcodes
Description :
PHP class for generating PDF documents.

* no external libraries are required for the basic functions;
* all standard page formats, custom page formats, custom margins and units
of measure;
* UTF-8 Unicode and Right-To-Left languages;
* TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0 fonts;
* font subsetting;
* methods to publish some XHTML + CSS code, Javascript and Forms;
* images, graphic (geometric figures) and transformation methods;
* supports JPEG, PNG and SVG images natively, all images supported by GD
(GD, GD2, GD2PART, GIF, JPEG, PNG, BMP, XBM, XPM) and all images supported
via ImagMagick (http: www.imagemagick.org/www/formats.html)
* 1D and 2D barcodes: CODE 39, ANSI MH10.8M-1983, USD-3, 3 of 9, CODE 93,
USS-93, Standard 2 of 5, Interleaved 2 of 5, CODE 128 A/B/C, 2 and 5 Digits
UPC-Based Extention, EAN 8, EAN 13, UPC-A, UPC-E, MSI, POSTNET, PLANET,
RMS4CC (Royal Mail 4-state Customer Code), CBC (Customer Bar Code),
KIX (Klant index – Customer index), Intelligent Mail Barcode, Onecode,
USPS-B-3200, CODABAR, CODE 11, PHARMACODE, PHARMACODE TWO-TRACKS,
Datamatrix ECC200, QR-Code, PDF417;
* ICC Color Profiles, Grayscale, RGB, CMYK, Spot Colors and Transparencies;
* automatic page header and footer management;
* document encryption up to 256 bit and digital signature certifications;
* transactions to UNDO commands;
* PDF annotations, including links, text and file attachments;
* text rendering modes (fill, stroke and clipping);
* multiple columns mode;
* no-write page regions;
* bookmarks and table of content;
* text hyphenation;
* text stretching and spacing (tracking/kerning);
* automatic page break, line break and text alignments including justification;
* automatic page numbering and page groups;
* move and delete pages;
* page compression (requires php-zlib extension);
* XOBject templates;
* PDF/A-1b (ISO 19005-1:2005) support.

By default, TCPDF uses the GD library which is know as slower than ImageMagick
solution. You can optionally install php-pecl-imagick; TCPDF will use it.

——————————————————————————–
Update Information:

**Version 6.2.25** – Fix support for image URLs. —- **Version 6.2.24** –
Support remote urls when checking if file exists. —- **Version 6.2.23** –
Simplify file_exists function. —- **Version 6.2.20** – Fix for security
vulnerability: Using the phar:// wrapper it was possible to trigger the
unserialization of user provided data. —- **Version 6.2.19** – Merge
various fixes for PHP 7.3 compatibility and security.
——————————————————————————–
ChangeLog:

* Mon Sep 24 2018 Remi Collet <remi@remirepo.net> – 6.2.25-1
– update to 6.2.25
* Sat Sep 15 2018 Remi Collet <remi@remirepo.net> – 6.2.22-1
– update to 6.2.22
* Fri Sep 14 2018 Remi Collet <remi@remirepo.net> – 6.2.21-1
– update to 6.2.21
* Fri Sep 14 2018 Remi Collet <remi@remirepo.net> – 6.2.19-1
– update to 6.2.19
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2018-f1ca41a1a6’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

Top
More in Preporuke
Ranjivost Cisco SD-WAN Solution programa

Otkrivena je ranjivost kod Cisco SD-WAN Solution proizvoda uzrokovana neispravnom validacijom certifikata. Potencijalni udaljeni napadač bi mogao iskoristiti ranjivosti opskrbljivanjem...

Close