[Git][security-tracker-team/security-tracker][master] new dompdf issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b27a4cd1 by Moritz Muehlenhoff at 2022-07-22T19:17:07+02:00
new dompdf issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -245,7 +245,7 @@ CVE-2022-2476 (A null pointer dereference bug was found in wavpack-5.4.0 The res
 	- wavpack <unfixed> (bug #1015790)
 	[bullseye] - wavpack <no-dsa> (Minor issue)
 	[buster] - wavpack <no-dsa> (Minor issue)
-	NOTE: https://github.com/dbry/WavPack/issues/121	
+	NOTE: https://github.com/dbry/WavPack/issues/121
 	NOTE: https://github.com/dbry/WavPack/commit/25b4a2725d8568212e7cf89ca05ca29d128af7ac
 CVE-2022-2475
 	RESERVED
@@ -1544,7 +1544,9 @@ CVE-2022-2402
 CVE-2022-2401 (Unrestricted information disclosure of all users in Mattermost version ...)
 	- mattermost-server <itp> (bug #823556)
 CVE-2022-2400 (External Control of File Name or Path in GitHub repository dompdf/domp ...)
-	TODO: check
+	- php-dompdf <unfixed>
+	NOTE: https://huntr.dev/bounties/a6da5e5e-86be-499a-a3c3-2950f749202a
+	NOTE: https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a
 CVE-2022-2399
 	RESERVED
 CVE-2022-35741 (Apache CloudStack version 4.5.0 and later has a SAML 2.0 authenticatio ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b27a4cd109a4c16e6674b5b7ba9dac036e7d8aad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b27a4cd109a4c16e6674b5b7ba9dac036e7d8aad
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220722/c1c87062/attachment.htm>