symfony - security update

Fixed packages 1

Vulnerabilities 4

• High 7.3
  CVE-2024-50340 Public exploit Scanner template EPSS 62%

  Ability to change environment from query in symfony/runtime

  symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to c…

  symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  Nov 6, 2024
• Low 3.1
  CVE-2024-50342

  Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client

  symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the `NoPrivateNetworkHttpClient`, some internal information is still leaking during host resolut…

  symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  Nov 6, 2024
• Low 3.1
  CVE-2024-50343

  Incorrect response from Validator when input ends with `\n` in symfony/validator

  symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versio…

  symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  Nov 6, 2024
• Low 3.1
  CVE-2024-50345

  Open redirect via browser-sanitized URLs in symfony/http-foundation

  symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick …

  symfony symfony symfony symfony Debian Ubuntu Packagist
  Nov 6, 2024