Fix CVE-2021-23792 vulnerability from imageio-jpeg #1336

Activity

1. CGarces commented on Jun 11, 2022

   

   CGarces

   on Jun 11, 2022

   Author

   More actions

   I have enabled dependabot on my repo
   https://github.com/CGarces/epubcheck/blob/main/.github/dependabot.yml

   And the automatic PR generated by dependabot for 3.8.2 upgrade, pass the CI scripts.

   CGarces#3
2. rdeltour

   added

   type: maintenanceThe issue is related to a meta task (build system, dependency update, etc)The issue is related to a meta task (build system, dependency update, etc)

   status: acceptedReady to be further processedReady to be further processed

   priority: criticalTo be processed and published ASAPTo be processed and published ASAP

   on Jun 20, 2022
3. rdeltour

   added

   status: in progressThe issue is being implemented by the development teamThe issue is being implemented by the development team

   on Nov 28, 2022
4. rdeltour

   added this to the v5.0.0-beta milestone on Nov 28, 2022
5. rdeltour

   added a commit that references this issue on Nov 28, 2022

   fix: fix CVE-2021-23792 vulnerability from imageio-jpeg

   ...

   This issue will close once commit 50b847f is merged into the 'main' branch.

   50b847f
6. rdeltour

   added

   status: completedWork completed, can be closedWork completed, can be closed

   and removed

   status: in progressThe issue is being implemented by the development teamThe issue is being implemented by the development team

   on Dec 1, 2022
7. rdeltour

   closed this as completedin 50b847fon Dec 7, 2022