Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 41: Advisory FEDORA-2025-85549e07c8 Critical: php-tcpdf Fix

Version 6.9.1 (2025-04-03) Fixed Path Traversal security vulnerability reported by Positive Technologies. Version 6.9.0 (2025-03-30) Added PHP 8.4 testing. Removed tcpdf_import.php and tcpdf_parser.php files (for a parser check the tc-. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-85549e07c8 2025-04-15 18:33:59.718518+00:00 -------------------------------------------------------------------------------- Name : php-tcpdf Product : Fedora 41 Version : 6.9.1 Release : 1.fc41 URL : https://tcpdf.org/ Summary : PHP class for generating PDF documents and barcodes Description : PHP class for generating PDF documents. * no external libraries are required for the basic functions; * all standard page formats, custom page formats, custom margins and units of measure; * UTF-8 Unicode and Right-To-Left languages; * TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0 fonts; * font subsetting; * methods to publish some XHTML + CSS code, Javascript and Forms; * images, graphic (geometric figures) and transformation methods; * supports JPEG, PNG and SVG images natively, all images supported by GD (GD, GD2, GD2PART, GIF, JPEG, PNG, BMP, XBM, XPM) and all images supported via ImagMagick (http: ) * 1D and 2D barcodes: CODE 39, ANSI MH10.8M-1983, USD-3, 3 of 9, CODE 93, USS-93, Standard 2 of 5, Interleaved 2 of 5, CODE 128 A/B/C, 2 and 5 Digits UPC-Based Extention, EAN 8, EAN 13, UPC-A, UPC-E, MSI, POSTNET, PLANET, RMS4CC (Royal Mail 4-state Customer Code), CBC (Customer Bar Code), KIX (Klant index - Customer index), Intelligent Mail Barcode, Onecode, USPS-B-3200, CODABAR, CODE 11, PHARMACODE, PHARMACODE TWO-TRACKS, Datamatrix ECC200, QR-Code, PDF417; * ICC Color Profiles, Grayscale, RGB, CMYK, Spot Colors and Transparencies; * automatic page header and footer management; * document encryption up to 256 bit and digital signature certifications; *transactions to UNDO commands; * PDF annotations, including links, text and file attachments; * text rendering modes (fill, stroke and clipping); * multiple columns mode; * no-write page regions; * bookmarks and table of content; * text hyphenation; * text stretching and spacing (tracking/kerning); * automatic page break, line break and text alignments including justification; * automatic page numbering and page groups; * move and delete pages; * page compression (requires php-zlib extension); * XOBject templates; * PDF/A-1b (ISO 19005-1:2005) support. By default, TCPDF uses the GD library which is know as slower than ImageMagick solution. You can optionally install php-pecl-imagick; TCPDF will use it. -------------------------------------------------------------------------------- Update Information: Version 6.9.1 (2025-04-03) Fixed Path Traversal security vulnerability reported by Positive Technologies. Version 6.9.0 (2025-03-30) Added PHP 8.4 testing. Removed tcpdf_import.php and tcpdf_parser.php files (for a parser check the tc- lib-pdf-parser project instead). Fix composer.json. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 7 2025 Remi Collet - 6.9.1-1 - update to 6.9.1 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-85549e07c8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Resolved Directory Traversal vulnerability in php-tcpdf on Fedora 41, improving document safety with 6.9.1 release.. php-tcpdf Fedora Path Traversal update. . Severity: Critical. LinuxSecurity.com Team

Apr 15, 2025 •Critical Fedora