[Git][security-tracker-team/security-tracker][master] Track two CVEs as pixed by php-twig upload
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Nov 8 09:45:56 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
69cc06f8 by Salvatore Bonaccorso at 2024-11-08T10:45:29+01:00
Track two CVEs as pixed by php-twig upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -550,12 +550,12 @@ CVE-2024-51988 (RabbitMQ is a feature rich, multi-protocol messaging and streami
CVE-2024-51757 (happy-dom is a JavaScript implementation of a web browser without its ...)
NOT-FOR-US: happy-dom
CVE-2024-51755 (Twig is a template language for PHP. In a sandbox, an attacker can acc ...)
- - php-twig <unfixed> (bug #1086884)
+ - php-twig 3.14.2-1 (bug #1086884)
- twig <removed>
NOTE: https://github.com/twigphp/Twig/security/advisories/GHSA-jjxq-ff2g-95vh
NOTE: Fixed by: https://github.com/twigphp/Twig/commit/831c148e786178e5f2fde9db67266be3bf241c21 (v3.14.1)
CVE-2024-51754 (Twig is a template language for PHP. In a sandbox, an attacker can cal ...)
- - php-twig <unfixed> (bug #1086884)
+ - php-twig 3.14.2-1 (bug #1086884)
- twig <removed>
NOTE: https://github.com/twigphp/Twig/security/advisories/GHSA-6377-hfv9-hqf6
NOTE: Fixed by: https://github.com/twigphp/Twig/commit/2bb8c2460a2c519c498df9b643d5277117155a73 (v3.14.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69cc06f867db759e310c9d653e4edec778cf358c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69cc06f867db759e310c9d653e4edec778cf358c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241108/db8baeef/attachment.htm>
More information about the debian-security-tracker-commits
mailing list