[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2018-1477{3,4}/symfony
Salvatore Bonaccorso
carnil at debian.org
Fri Aug 3 09:53:00 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a6d895cb by Salvatore Bonaccorso at 2018-08-03T08:51:05Z
Add fixed version for CVE-2018-1477{3,4}/symfony
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -234,11 +234,11 @@ CVE-2018-14775 (tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has
TODO: check
CVE-2018-14774 [Possible host header injection when using HttpCache]
RESERVED
- - symfony <unfixed>
+ - symfony 3.4.14+dfsg-1
NOTE: https://symfony.com/blog/cve-2018-14774-possible-host-header-injection-when-using-httpcache
CVE-2018-14773 [Remove support for legacy and risky HTTP headers]
RESERVED
- - symfony <unfixed>
+ - symfony 3.4.14+dfsg-1
NOTE: https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers
CVE-2018-14772
RESERVED
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a6d895cb01535220a785e33d35477d6443f70afa
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a6d895cb01535220a785e33d35477d6443f70afa
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180803/d52a7a50/attachment.html>
More information about the debian-security-tracker-commits
mailing list