Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 22, FEDORA-2015-9034 Critical: php-symfony ESI Access Issue

fedora
Calendar Grey June 6, 2015
Dist Fedora Esm H88
Crucial patch released for Fedora 22: php-symfony mitigating CVE-2015-4050 to bolster web app defenses.
**2.5.12** (2015-05-27) * security #14759 CVE-2015-4050 [HttpKernel] Do not call the FragmentListener if _controller is already defined (jakzal)

Summary

PHP framework for web projects

Update Information:

**2.5.12** (2015-05-27) * security #14759 CVE-2015-4050 [HttpKernel] Do not call the FragmentListener if _controller is already defined (jakzal)

Topics%20covered

Topics Covered

security advisory critical Fedora web application php-symfony esi access

Change Log

* Wed May 27 2015 Remi Collet - 2.5.12-1 - Update to 2.5.12 - security fix for CVE-2015-4050

References


[ 1 ] Bug #1227264 - CVE-2015-4050 php-symfony: ESI unauthorized access https://bugzilla.redhat.com/show_bug.cgi?id=1227264

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-symfony' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-symfony
Product: Fedora 22
Version: 2.5.12
Release: 1.fc22
URL: https://symfony.com/
Summary: PHP framework for web projects

Topics%20covered

Topics Covered

security advisory critical Fedora web application php-symfony esi access

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here