php-dompdf (2.0.7+dfsg-1) unstable; urgency=medium * New upstream version 2.0.7 -- William Desportes Wed, 17 Apr 2024 20:22:43 +0200 php-dompdf (2.0.4+dfsg-2) unstable; urgency=medium * Team upload * Force system dependencies loading -- David Prévot Thu, 07 Mar 2024 18:55:58 +0100 php-dompdf (2.0.4+dfsg-1) unstable; urgency=medium * New upstream version 2.0.4 (CVE-2023-50262) (Closes: #1058793) * Update gbp.conf -- William Desportes Sat, 16 Dec 2023 23:41:34 +0100 php-dompdf (2.0.3+dfsg-4) unstable; urgency=medium [ Robin Gustafsson ] * Build DejaVu .ufm files (Closes: #1056974) * Clean up the vendor directory -- William Desportes Wed, 06 Dec 2023 21:09:03 +0100 php-dompdf (2.0.3+dfsg-3) unstable; urgency=medium * Add -b to Vcs-Git * Add a test for the Dompdf class * Forward upstream the phpunit 10 patch -- William Desportes Fri, 29 Sep 2023 13:15:59 +0200 php-dompdf (2.0.3+dfsg-2) unstable; urgency=medium * Move to fonts-liberation (Ref: #1038940) (Closes: #1039773) * Add a patch for phpunit 10 (Closes: #1039773) -- William Desportes Thu, 06 Jul 2023 11:20:10 +0200 php-dompdf (2.0.3+dfsg-1) unstable; urgency=medium * New upstream version 2.0.3 (CVE-2023-24813) [ William Desportes ] * Remove old config file from debian/ * Update d/upstream/changelog -- William Desportes Wed, 08 Feb 2023 13:41:16 +0100 php-dompdf (2.0.2+dfsg-2) unstable; urgency=medium * Add missing closes to d/changelog (Closes: #978994) * Fix autopkgtest require * Add a Cpdf test * Fix wrong path for Cpdf in autoload * Fixup ImageTest because it uses a local test file * Add a DEP-8 test for basic-html-pdf.php example -- William Desportes Sat, 04 Feb 2023 15:17:50 +0100 php-dompdf (2.0.2+dfsg-1) unstable; urgency=medium [ Katharina Drexel ] * Refresh the packaging [ William Desportes ] * Remove dfsg fonts lib/fonts/*.afm * Remove dfsg fonts lib/fonts/DejaVu*.{ufm, ttf} * New upstream version 2.0.0 - Closes: #1015874 - Fixes CVE-2022-2400 - Fixes CVE-2021-3902 - Fixes CVE-2022-0085 - Fixes CVE-2021-3838 * New upstream version 2.0.1 (CVE-2022-41343) * New upstream version 2.0.2 (CVE-2023-23924) * Document copyrights of debian/* files * Set Uploaders to myself (Closes: #978994) * Remove Suggests: php-apcu, php-cli and php-tcpdf * Install the VERSION file because the code needs it * Add var/cache/php-dompdf/tmp to d/dirs * Add pkg-php-tools overrides and autoloaders * Add a patch to change directories to Debian folders * Add a patch for fontDir to work on build tests * Depend on fonts-dejavu-{extra,core} and sdop for fonts -- William Desportes Fri, 03 Feb 2023 22:53:19 +0100 php-dompdf (0.6.2+dfsg-3+deb10u2) buster-security; urgency=medium * Non-maintainer upload by the LTS Security Team. * CVE-2021-3838 fix was incomplete in handling fonts vulnerabilty. Backport needed to further backport upstream chroot changes, conjointly with ubuntu security team. Thanks to Camila Camargo de Matos. -- Bastien Roucariès Thu, 10 Aug 2023 17:46:54 +0000 php-dompdf (0.6.2+dfsg-3+deb10u1) buster-security; urgency=medium * Non-maintainer upload by the LTS Security Team. * Fix CVE-2021-3838: php-dompdf was vulnerable to Deserialization of Untrusted Data. * Fix CVE-2022-2400: php-dompdf was vulnerable to External Control of File Name thus loading unallowed file. -- Bastien Roucariès Thu, 13 Jul 2023 19:57:57 +0000 php-dompdf (0.6.2+dfsg-3) unstable; urgency=medium * [8b6277c] Fix font loading during build (Closes: #820691) * [8b84346] Update dependencies for PHP 7 (Closes: #821571, #821696) -- Markus Frosch Tue, 19 Apr 2016 21:14:52 +0200 php-dompdf (0.6.2+dfsg-2) unstable; urgency=medium * [a922437] Update php-font-lib dependency to ~0.2 -- Markus Frosch Mon, 29 Feb 2016 14:38:08 +0100 php-dompdf (0.6.2+dfsg-1) unstable; urgency=medium [ David Prévot ] * [dd91f93] Revert "Add ownCloud for Debian to uploaders" * [315a84c] Drop now useless minimal version for php-font-lib * [a470548] Fix watch file [ Markus Frosch ] * [9bd8627] Update watch to exclude beta releases and mark them dfsg * [d1a2d1a] Adopt package within the PHP team (Closes: #748604) * [9f53a9a] Imported Upstream version 0.6.2+dfsg, which fixes: * CVE-2014-5013 * CVE-2014-5012 * CVE-2014-5011 * CVE-2014-2383 (Closes: #813849) * [a4b6496] Update copyright to not mention DFSG removed files * [9fdc430] Bump standards version to 3.9.7 -- Markus Frosch Sun, 28 Feb 2016 18:09:26 +0100 php-dompdf (0.6.1+dfsg-2) unstable; urgency=medium * Document security issue fixed in last upstream version, and upload to unstable. -- David Prévot Wed, 23 Apr 2014 15:23:50 -0400 php-dompdf (0.6.1+dfsg-1) experimental; urgency=medium * New upstream release, uploaded to experimental because of the php-font-lib dependency: - Fixes an arbitrary file read vulnerability, that requires DOMPDF_ENABLE_REMOTE (disabled by default) to be enabled. (Closes: #745619) [CVE-2014-2383] * Add ownCloud for Debian to uploaders * Bump standards version to 3.9.5 * Use Files-Excluded feature of uscan * Use phpcomposer from pkg-php-tools * Ship upstream README.md * Update dependencies, as recommended upstream * Update copyright * Acknowledge upstream separation of cache and fonts * Update upstream changelog * Use internal CSS in example -- David Prévot Sat, 12 Apr 2014 14:32:12 -0400 php-dompdf (0.6.0~beta3+dfsg0-1) unstable; urgency=low * Initial release (Closes: #567928) -- David Prévot Sat, 23 Nov 2013 10:00:18 -0400