Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
30e4c14e by Salvatore Bonaccorso at 2021-05-17T21:21:46+02:00
Mark CVE-2021-21424/symfony as no-dsa for buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -28129,6 +28129,7 @@ CVE-2021-21425 (Grav Admin Plugin is an HTML user
interface that provides a way
NOT-FOR-US: Grav Admin Plugin
CVE-2021-21424 (Symfony is a PHP framework for web and console applications
and a set ...)
- symfony 4.4.19+dfsg-2
+ [buster] - symfony <no-dsa> (Minor issue; can be fixed via point
release)
NOTE:
https://symfony.com/blog/cve-2021-21424-prevent-user-enumeration-in-authentication-mechanisms
NOTE:
https://github.com/symfony/symfony/commit/f012eee6c6034a94566dff596fe4e16dfc5d9c1f
CVE-2021-21423 (`projen` is a project generation tool that synthesizes project
configu ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30e4c14e118126d007f0e1805c793b298078f3e0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
