CVE-2022-2400

Published: 18 July 2022

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

Priority

5.3

Package	Release	Status
php-dompdf Launchpad, Ubuntu, Debian	kinetic	Ignored (end of life, was needed)
	upstream	Released (2.0.0)
	xenial	Released (0.6.1+dfsg-2ubuntu1+esm1) Available with Ubuntu Pro
	trusty	Ignored (end of standard support)
	bionic	Released (0.6.2+dfsg-3ubuntu0.18.04.1~esm1) Available with Ubuntu Pro
	focal	Released (0.6.2+dfsg-3ubuntu0.20.04.1)
	jammy	Released (0.6.2+dfsg-3.1ubuntu0.1)
	impish	Ignored (end of life)
	lunar	Does not exist
	Patches: upstream: https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a
icingaweb2 Launchpad, Ubuntu, Debian	kinetic	Ignored (end of life, was needs-triage)
	trusty	Does not exist
	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	upstream	Needs triage
	impish	Ignored (end of life)
	xenial	Needs triage
	lunar	Needs triage
civicrm Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	upstream	Needs triage
	impish	Ignored (end of life)
	xenial	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Does not exist

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.