Debian/symfony: high 8.1
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timing attacks. This is related to symfony/ht
Action: Upgrade symfony to 4.3.8+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.8+dfsg-1 | - |
Fixed versions
| 4.3.8+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2019-18887#Debian:13/symfony
- https://security-tracker.debian.org/tracker/CVE-2019-18887
published · modified · JSON