FEDORA-EPEL-2021-113abf45ca — security update for composer

stable

composer-1.10.22-1.el7

FEDORA-EPEL-2021-113abf45ca created by remi 4 years ago for Fedora EPEL 7

Version 1.10.22 2021-04-27

Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx / CVE-2021-29472)

This update has been submitted for testing by remi.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

remi edited this update.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

Builds

composer-1.10.22-1.el7

BZ#1955727 CVE-2021-29472 composer: Specifically crafted URL values allow code to be executed in the HgDriver

BZ#1955729 CVE-2021-29472 composer: Specifically crafted URL values allow code to be executed in the HgDriver [epel-7]

composer-1.10.22-1.el7

Automated Test Results

ignored