Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3be7d30e by Salvatore Bonaccorso at 2024-06-13T13:26:46+02:00
Track fixed version for two composer CVEs fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1075,12 +1075,12 @@ CVE-2024-36302 (An origin validation vulnerability in
the Trend Micro Apex One s
CVE-2024-35329 (libyaml 0.2.5 is vulnerable to a heap-based Buffer Overflow in
yaml_do ...)
NOTE: disputed libyaml issue, to be rejected
CVE-2024-35242 (Composer is a dependency manager for PHP. On the 2.x branch
prior to v ...)
- - composer <unfixed> (bug #1073126)
+ - composer 2.7.7-1 (bug #1073126)
NOTE:
https://github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
NOTE:
https://github.com/composer/composer/commit/fc57b93603d7d90b71ca8ec77b1c8a9171fdb467
(2.2.24)
NOTE:
https://github.com/composer/composer/commit/6bd43dff859c597c09bd03a7e7d6443822d0a396
(2.7.7)
CVE-2024-35241 (Composer is a dependency manager for PHP. On the 2.x branch
prior to v ...)
- - composer <unfixed> (bug #1073125)
+ - composer 2.7.7-1 (bug #1073125)
NOTE:
https://github.com/composer/composer/security/advisories/GHSA-47f6-5gq3-vx9c
NOTE:
https://github.com/composer/composer/commit/b93fc6ca437da35ae73d667d0618749c763b67d4
(2.2.24)
NOTE:
https://github.com/composer/composer/commit/ee28354ca8d33c15949ad7de2ce6656ba3f68704
(2.7.7)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3be7d30ee32be3e718df84200b7111495f8e9955
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3be7d30ee32be3e718df84200b7111495f8e9955
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
