[Git][security-tracker-team/security-tracker][master] symfony in jessie not affected by CVE-2017-16790
Thorsten Alteholz
alteholz at debian.org
Wed Sep 12 15:26:12 BST 2018
Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits:
635295e8 by Thorsten Alteholz at 2018-09-12T14:22:42Z
symfony in jessie not affected by CVE-2017-16790
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47549,6 +47549,7 @@ CVE-2017-16791
CVE-2017-16790 (An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, ...)
{DSA-4262-1}
- symfony 3.4.0+dfsg-1
+ [jessie] - symfony <not-affected> (vulnerable code introduced in 2.4.*)
NOTE: https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files
NOTE: https://github.com/symfony/symfony/pull/24993
CVE-2017-16789 (Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/635295e8475da77b12aee1e5dbf2ab65d0b345e3
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/635295e8475da77b12aee1e5dbf2ab65d0b345e3
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180912/c1f5b3cb/attachment.html>
More information about the debian-security-tracker-commits
mailing list