Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e9659a03 by Salvatore Bonaccorso at 2023-12-19T06:21:24+01:00
Track fixed version for php-dompdf-svg-lib issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1458,12 +1458,12 @@ CVE-2023-6753 (Path Traversal in GitHub repository
mlflow/mlflow prior to 2.9.2.
CVE-2023-50263 (Nautobot is a Network Source of Truth and Network Automation
Platform ...)
NOT-FOR-US: Nautobot
CVE-2023-50252 (php-svg-lib is an SVG file parsing / rendering library. Prior
to versi ...)
- - php-dompdf-svg-lib <unfixed> (bug #1058641)
+ - php-dompdf-svg-lib 0.5.1-1 (bug #1058641)
NOTE:
https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-jq98-9543-m4cr
NOTE: Fixed by:
https://github.com/dompdf/php-svg-lib/commit/08ce6a96d63ad7216315fae34a61c886dd2dc030
(0.5.1)
TODO: check, other packages are embedding the library: civicrm,
icinga-php-thirdparty and icingaweb2 to be checked
CVE-2023-50251 (php-svg-lib is an SVG file parsing / rendering library. Prior
to versi ...)
- - php-dompdf-svg-lib <unfixed> (bug #1058641)
+ - php-dompdf-svg-lib 0.5.1-1 (bug #1058641)
NOTE:
https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-ff5x-7qg5-vwf2
NOTE: Fixed by:
https://github.com/dompdf/php-svg-lib/commit/88163cbe562d9b391b3a352e54d9c89d02d77ee0
(0.5.1)
TODO: check, other packages are embedding the library: civicrm,
icinga-php-thirdparty and icingaweb2 to be checked
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9659a037f36262a15d276a11627ce25404f06c3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9659a037f36262a15d276a11627ce25404f06c3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
