[Secure-testing-commits] r41619 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue May 10 18:03:36 UTC 2016


Author: carnil
Date: 2016-05-10 18:03:36 +0000 (Tue, 10 May 2016)
New Revision: 41619

Modified:
   data/CVE/list
Log:
Add CVE-2016-4423/symfony

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-10 17:40:47 UTC (rev 41618)
+++ data/CVE/list	2016-05-10 18:03:36 UTC (rev 41619)
@@ -516,8 +516,11 @@
 	RESERVED
 CVE-2016-4424
 	RESERVED
-CVE-2016-4423
+CVE-2016-4423 [Large username storage in session]
 	RESERVED
+	- symfony <unfixed>
+	NOTE: https://github.com/symfony/symfony/pull/18733
+	NOTE: https://symfony.com/blog/cve-2016-4423-large-username-storage-in-session
 CVE-2015-8870
 	RESERVED
 CVE-2013-7455 (Double free vulnerability in the DefaultICCintents function in ...)




More information about the Secure-testing-commits mailing list