[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#813653: [pkg-php-pear] Bug#813653: jessie-pu: package symfony/2.3.21+dfsg-4+deb8u3



On Thu, Mar 31, 2016 at 23:43:03 +0200, Daniel Beyer wrote:

> Hi Julien,
> 
> Can you give a short update regarding the proposed
> symfony/2.3.21+dfsg-4+deb8u3, fixing CVE-2016-1902?
> It might be a bit late, but it would be great to have this fixed in 8.4,
> which is about to be released.
> 
> Do you need any further information from us?
> 
I must admit that I have trouble believing that you'd need 1kloc to add
a random_bytes function :(

Cheers,
Julien


Reply to: