[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1477{3,4}/symfony

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bb0dc906 by Salvatore Bonaccorso at 2018-08-02T09:04:28Z
Add CVE-2018-1477{3,4}/symfony

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -166,10 +166,14 @@ CVE-2018-14776 (Click Studios Passwordstate before 8.3 Build 8397 allows XSS by 
 	NOT-FOR-US: Click Studios Passwordstate
 CVE-2018-14775 (tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a ...)
 	TODO: check
-CVE-2018-14774
+CVE-2018-14774 [Possible host header injection when using HttpCache]
 	RESERVED
-CVE-2018-14773
+	- symfony <unfixed>
+	NOTE: https://symfony.com/blog/cve-2018-14774-possible-host-header-injection-when-using-httpcache
+CVE-2018-14773 [Remove support for legacy and risky HTTP headers]
 	RESERVED
+	- symfony <unfixed>
+	NOTE: https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers
 CVE-2018-14772
 	RESERVED
 CVE-2018-14771



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bb0dc90683e17e909ded71fa76dfcc97c013ec44

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bb0dc90683e17e909ded71fa76dfcc97c013ec44
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180802/b5799094/attachment.html>