UbuntuUpdates.org

Package "php-dompdf"

Name: php-dompdf

Description:

HTML to PDF converter
Latest version: 0.6.2+dfsg-3ubuntu0.20.04.1
Release: focal (20.04)
Level: security
Repository: universe
Homepage: http://dompdf.github.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "php-dompdf"

All arch deb package
APT INSTALL

Other versions of "php-dompdf" in Focal

Repository Area Version
base universe 0.6.2+dfsg-3
updates universe 0.6.2+dfsg-3ubuntu0.20.04.1

Changelog

Version: 0.6.2+dfsg-3ubuntu0.20.04.1 2023-08-08 13:06:49 UTC

  php-dompdf (0.6.2+dfsg-3ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: improper validation of user provided input
    - debian/patches/CVE-2021-3838_2022-2400.patch: update resource URI
      validation and handling.
    - CVE-2021-3838
    - CVE-2022-2400

 -- Camila Camargo de Matos <email address hidden> Fri, 04 Aug 2023 10:11:21 -0300
CVE-2021-3838 Deserialization of Untrusted Data using PHAR deserialization
CVE-2022-2400 External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.


About   -   Send Feedback to @ubuntu_updates