Thursday 5 November
Global

Your region, kept on this device.

Debian issues security update for Symfony PHP framework fixing multiple flaws

Severity
Medium
Sources
1

Debian Security Advisory DSA-6612-1 covers multiple vulnerabilities in the Symfony PHP framework, which could lead to denial of service or email header injection. The advisory does not list CVE identifiers or affected and fixed versions in the source material. Defenders running Symfony packages from Debian should apply the DSA-6612-1 update and review any applications that send email using Symfony components.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Apply the Debian security update for the symfony package as described in DSA-6612-1.
  2. Check whether your applications use Symfony and review any code that builds email headers from user input.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Wed 4 NovemberDSA-6612-1 symfony - security updateDebian Security Advisories

Who reported · 1 outlet

Debian Security Advisories

Report a problem