CVE-2024-22641

[mmuehlenhoff]

This appeared in the CVE feed, it doesn't seem like it was ever reported to you though?
https://github.com/zunak/CVE-2024-22641

(From: https://www.cve.org/CVERecord?id=CVE-2024-22641)

[williamdes]

05f3a28

typo CVE in commit name

Ref: #712

[carnil]

Note, that there are two distinct reports:

https://github.com/zunak/CVE-2024-22641 and
https://github.com/zunak/CVE-2024-22640

[williamdes]

Thank you @carnil
What a mess, no upstream coordination

[rbro]

Has CVE-2024-22641 been fixed too, or is it still pending?

[zolthan]

Still no new version for fixing this issue?

[glennmcewan]

Is there any update on this please? We're also seeing that Snyk still complains about this as being an open CVE: https://security.snyk.io/vuln/SNYK-PHP-TECNICKCOMTCPDF-7165692

[williamdes]

@nicolaasuni can you address this one before the next release ?

[nicolaasuni]

This should be sorted now.
Can you please verify?

[williamdes]

Ref 17fe959