UbuntuUpdates.org

Package "php-dompdf"

Name: php-dompdf

Description:

HTML to PDF converter
Latest version: 0.6.2+dfsg-3.1ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: http://dompdf.github.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "php-dompdf"

All arch deb package
APT INSTALL

Other versions of "php-dompdf" in Jammy

Repository Area Version
base universe 0.6.2+dfsg-3.1
updates universe 0.6.2+dfsg-3.1ubuntu0.1

Changelog

Version: 0.6.2+dfsg-3.1ubuntu0.1 2023-08-10 21:06:56 UTC

  php-dompdf (0.6.2+dfsg-3.1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: improper validation of user provided input
    - debian/patches/CVE-2021-3838_2022-2400.patch: update resource URI
      validation and handling.
    - CVE-2021-3838
    - CVE-2022-2400

 -- Camila Camargo de Matos <email address hidden> Fri, 04 Aug 2023 11:11:44 -0300
CVE-2021-3838 Deserialization of Untrusted Data using PHAR deserialization
CVE-2022-2400 External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.


About   -   Send Feedback to @ubuntu_updates