Debian/symfony: high 7.5
The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the para
Action: Upgrade symfony to 2.7.9+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.9+dfsg-1 | - |
Fixed versions
| 2.7.9+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2016-1902#Debian:13/symfony
- https://security-tracker.debian.org/tracker/CVE-2016-1902
published · modified · JSON