danfickle / danfickle/openhtmltopdf

openhtmltopdf-rtl-support: Upgrade icu4j to > 63.1 to mitigate CVE-2018-18928

Open
#843 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2.2k
Forks
423
PR merge metrics
No merged PRs in 30d

Description

openhtmltopdf-rtl-support currently uses icu4j v59.1 which seems to be affected by the vulnerability.
The mentioned security vulnerability https://nvd.nist.gov/vuln/detail/CVE-2018-18928 states, that this applies to the C-Version, but the fix also contained changes to Java files - so I assume it would be better to update the Java library used.

openhtmltopdf-rtl-support compiles against the latest version, 71.1 and my tests with some RTL text did not find any issues so I guess the version could just be bumped.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.