[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-21424/symfony as no-dsa for buster

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon May 17 20:22:24 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
30e4c14e by Salvatore Bonaccorso at 2021-05-17T21:21:46+02:00
Mark CVE-2021-21424/symfony as no-dsa for buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -28129,6 +28129,7 @@ CVE-2021-21425 (Grav Admin Plugin is an HTML user interface that provides a way
 	NOT-FOR-US: Grav Admin Plugin
 CVE-2021-21424 (Symfony is a PHP framework for web and console applications and a set  ...)
 	- symfony 4.4.19+dfsg-2
+	[buster] - symfony <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://symfony.com/blog/cve-2021-21424-prevent-user-enumeration-in-authentication-mechanisms
 	NOTE: https://github.com/symfony/symfony/commit/f012eee6c6034a94566dff596fe4e16dfc5d9c1f
 CVE-2021-21423 (`projen` is a project generation tool that synthesizes project configu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210517/718864d0/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list