diff --git a/CHANGELOG.TXT b/CHANGELOG.TXT index 2158b941..8fb0afae 100644 --- a/CHANGELOG.TXT +++ b/CHANGELOG.TXT @@ -1,3 +1,18 @@ +6.7.7 (2024-10-26) + - Update regular expression to avoid ReDoS (CVE-2024-22641) + - [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 + - SVG detection fix for inline data images #646 + - Fix count svg #647 + - Since the version 6.7.4, the "0" is considered like empty string and not displayed + - Fixed handling of transparency in PDF/A mode in addExtGState method + - Encrypt /DA string when document is encrypted + - Improve quality of generated seed, avoid potential security pitfall + - Try to use random_bytes() first if it's available + - Do not include the server parameters in the generated seed, as they might contain sensitive data + - Fix bug on _getannotsrefs when there are empty signature appearances but not other annot on a page + - Fix SVG coordinate parser that caused drawing artifacts + - Remove usage of xml_set_object() function + 6.7.6 (2024-10-06) - Forbid access to parent folder in HTML images. diff --git a/VERSION b/VERSION index 2ed16f40..38f118fa 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -6.7.6 +6.7.7 diff --git a/composer.json b/composer.json index 66724a17..666dac3f 100644 --- a/composer.json +++ b/composer.json @@ -12,7 +12,7 @@ "barcodes" ], "homepage": "http://www.tcpdf.org/", - "version": "6.7.6", + "version": "6.7.7", "license": "LGPL-3.0-or-later", "authors": [ { diff --git a/include/tcpdf_static.php b/include/tcpdf_static.php index 395bb958..ac9c3e1f 100644 --- a/include/tcpdf_static.php +++ b/include/tcpdf_static.php @@ -55,7 +55,7 @@ class TCPDF_STATIC { * Current TCPDF version. * @private static */ - private static $tcpdf_version = '6.7.6'; + private static $tcpdf_version = '6.7.7'; /** * String alias for total number of pages.