[Git][security-tracker-team/security-tracker][master] Add two new symfony issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1518d61 by Salvatore Bonaccorso at 2024-11-29T22:13:47+01:00
Add two new symfony issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91,9 +91,12 @@ CVE-2024-36615 (FFmpeg n7.0 has a race condition vulnerability in the VP9 decode
 CVE-2024-36612 (Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the hand ...)
 	NOT-FOR-US: Zulip
 CVE-2024-36611 (In Symfony v7.07, a security vulnerability was identified in the FormL ...)
-	TODO: check
+	[experimental] - symfony 7.1.0~beta1+dfsg-1
+	- symfony <unfixed>
+	NOTE: https://github.com/symfony/symfony/commit/a804ca15fcad279d7727b91d12a667fd5b925995 (v7.1.0-BETA1)
 CVE-2024-36610 (A deserialization vulnerability exists in the Stub class of the VarDum ...)
-	TODO: check
+	- symfony 6.4.4+dfsg-3
+	NOTE: Fixed by: https://github.com/symfony/symfony/commit/3ffd495bb3cc4d2e24e35b2d83c5b909cab7e259 (v6.4.4)
 CVE-2024-35371 (Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization f ...)
 	NOT-FOR-US: Ant-Media-Server
 CVE-2024-35369 (In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c m ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1518d61c0dc91636c88ace18194b67225d0bda7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1518d61c0dc91636c88ace18194b67225d0bda7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241129/7e71cfd0/attachment.htm>