FEDORA-2023-74b702f058 — security update for php-symfony4

stable

php-symfony4-4.4.50-1.fc37

FEDORA-2023-74b702f058 created by remi 3 years ago for Fedora 37

Version 4.4.50 (2023-02-01)

security cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas)
security cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (nicolas-grekas)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-74b702f058

This update has been submitted for testing by remi.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

remi edited this update.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

approved

3 years ago

Builds

php-symfony4-4.4.50-1.fc37

BZ#2167258 CVE-2022-24894 php-symfony: Prevent storing cookie headers in HttpCache

BZ#2167259 CVE-2022-24894 php-symfony: Prevent storing cookie headers in HttpCache [fedora-all]

BZ#2167261 CVE-2022-24895 php-symfony: Possible CSRF token fixation

BZ#2167262 CVE-2022-24895 php-symfony: Possible CSRF token fixation [fedora-all]

php-symfony4-4.4.50-1.fc37

Automated Test Results

ignored