[Git][security-tracker-team/security-tracker][master] symfony in jessie not affected by CVE-2017-16790

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
635295e8 by Thorsten Alteholz at 2018-09-12T14:22:42Z
symfony in jessie not affected by CVE-2017-16790

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47549,6 +47549,7 @@ CVE-2017-16791
 CVE-2017-16790 (An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, ...)
 	{DSA-4262-1}
 	- symfony 3.4.0+dfsg-1
+	[jessie] - symfony <not-affected> (vulnerable code introduced in 2.4.*)
 	NOTE: https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files
 	NOTE: https://github.com/symfony/symfony/pull/24993
 CVE-2017-16789 (Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/635295e8475da77b12aee1e5dbf2ab65d0b345e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/635295e8475da77b12aee1e5dbf2ab65d0b345e3
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180912/c1f5b3cb/attachment.html>