[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-21424/symfony as no-dsa for buster
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon May 17 20:22:24 BST 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
30e4c14e by Salvatore Bonaccorso at 2021-05-17T21:21:46+02:00
Mark CVE-2021-21424/symfony as no-dsa for buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -28129,6 +28129,7 @@ CVE-2021-21425 (Grav Admin Plugin is an HTML user interface that provides a way
NOT-FOR-US: Grav Admin Plugin
CVE-2021-21424 (Symfony is a PHP framework for web and console applications and a set ...)
- symfony 4.4.19+dfsg-2
+ [buster] - symfony <no-dsa> (Minor issue; can be fixed via point release)
NOTE: https://symfony.com/blog/cve-2021-21424-prevent-user-enumeration-in-authentication-mechanisms
NOTE: https://github.com/symfony/symfony/commit/f012eee6c6034a94566dff596fe4e16dfc5d9c1f
CVE-2021-21423 (`projen` is a project generation tool that synthesizes project configu ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210517/718864d0/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list