Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7e81a935 by Salvatore Bonaccorso at 2020-09-02T22:29:08+02:00
Add CVE-2020-15094/symfony
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20687,7 +20687,9 @@ CVE-2020-15095 (Versions of the npm CLI prior to 6.14.6
are vulnerable to an inf
NOTE: https://github.com/npm/cli/security/advisories/GHSA-93f3-23rq-pjfp
NOTE:
https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc
CVE-2020-15094 (In Symfony before versions 4.4.13 and 5.1.5, the
CachingHttpClient cla ...)
- TODO: check
+ - symfony 4.4.13+dfsg-1
+ NOTE:
https://github.com/symfony/symfony/security/advisories/GHSA-754h-5r27-7x3r
+ NOTE:
https://github.com/symfony/symfony/commit/d9910e0b33a2e0f993abff41c6fbc86951b66d78
CVE-2020-15093 (The tough library (Rust/crates.io) prior to version 0.7.1 does
not pro ...)
NOT-FOR-US: Rust tough
CVE-2020-15092 (In TimelineJS before version 3.7.0, some user data renders as
HTML. An ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e81a9355a06cd3cfb06ea3da528e39ab2552b70
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e81a9355a06cd3cfb06ea3da528e39ab2552b70
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
