Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
021197fb by Moritz Mühlenhoff at 2024-03-20T20:00:13+01:00
php-dompdf-svg-lib / pdns-rec DSAs
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -7399,7 +7399,6 @@ CVE-2024-25249 (An issue in He3 App for macOS version
2.0.17, allows remote atta
NOT-FOR-US: He3 App for macOS
CVE-2024-25117 (php-svg-lib is a scalable vector graphics (SVG) file
parsing/rendering ...)
- php-dompdf-svg-lib 0.5.2-1 (bug #1064781)
- [bookworm] - php-dompdf-svg-lib <no-dsa> (Minor issue)
NOTE:
https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273
NOTE:
https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa
(0.5.2)
NOTE:
https://github.com/dompdf/php-svg-lib/commit/8ffcc41bbde39f09f94b9760768086f12bbdce42
(0.5.2)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,8 @@
+[20 Mar 2024] DSA-5626-2 pdns-recursor - regression update
+ [bookworm] - pdns-recursor 4.8.7-1
+[20 Mar 2024] DSA-5642-1 php-dompdf-svg-lib - security update
+ {CVE-2023-50251 CVE-2023-50252 CVE-2024-25117}
+ [bookworm] - php-dompdf-svg-lib 0.5.0-3+deb12u1
[19 Mar 2024] DSA-5641-1 fontforge - security update
{CVE-2024-25081 CVE-2024-25082}
[bullseye] - fontforge 1:20201107~dfsg-4+deb11u1
=====================================
data/dsa-needed.txt
=====================================
@@ -58,9 +58,6 @@ opennds/stable
--
php-cas/oldstable
--
-php-dompdf-svg-lib/stable (jmm)
- William Desportes is proposing an update needing review
([email protected])
---
php-horde-mime-viewer/oldstable
--
php-horde-turba/oldstable
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/021197fbb14b781d914a7eea0c02e06f984a10b1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/021197fbb14b781d914a7eea0c02e06f984a10b1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
