From 7c0a807864758b95731c19dd50a1a40d1465a8ed Mon Sep 17 00:00:00 2001 From: Cedric van Putten Date: Thu, 9 Aug 2018 13:36:49 +0200 Subject: [PATCH] Add advisory for Laravel cookie serialization vulnerability --- illuminate/cookie/2018-08-08-1.yaml | 35 +++++++++++++++++++++++++++++ laravel/framework/2018-08-08-1.yaml | 35 +++++++++++++++++++++++++++++ 2 files changed, 70 insertions(+) create mode 100644 illuminate/cookie/2018-08-08-1.yaml create mode 100644 laravel/framework/2018-08-08-1.yaml diff --git a/illuminate/cookie/2018-08-08-1.yaml b/illuminate/cookie/2018-08-08-1.yaml new file mode 100644 index 000000000..751484d19 --- /dev/null +++ b/illuminate/cookie/2018-08-08-1.yaml @@ -0,0 +1,35 @@ +title: Cookie serialization vulnerability +link: https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30 +cve: ~ +branches: + 4.0.x: + time: ~ + versions: ['>=4.0.0', '<=4.0.11'] + 4.1.x: + time: ~ + versions: ['>=4.1.0', '<=4.1.31'] + 4.2.x: + time: ~ + versions: ['>=4.2.0', '<=4.2.22'] + 5.0.x: + time: ~ + versions: ['>=5.0.0', '<=5.0.35'] + 5.1.x: + time: ~ + versions: ['>=5.1.0', '<=5.1.46'] + 5.2.x: + time: ~ + versions: ['>=5.2.0', '<=5.2.45'] + 5.3.x: + time: ~ + versions: ['>=5.3.0', '<=5.3.31'] + 5.4.x: + time: ~ + versions: ['>=5.4.0', '<=5.4.36'] + 5.5.x: + time: 2018-08-07 18:07:12 + versions: ['>=5.5.0', '<5.5.42'] + 5.6.x: + time: 2018-08-07 07:53:14 + versions: ['>=5.6.0', '<5.6.30'] +reference: composer://illuminate/cookie diff --git a/laravel/framework/2018-08-08-1.yaml b/laravel/framework/2018-08-08-1.yaml new file mode 100644 index 000000000..8f9a68e92 --- /dev/null +++ b/laravel/framework/2018-08-08-1.yaml @@ -0,0 +1,35 @@ +title: Cookie serialization vulnerability +link: https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30 +cve: ~ +branches: + 4.0.x: + time: ~ + versions: ['>=4.0.0', '<=4.0.11'] + 4.1.x: + time: ~ + versions: ['>=4.1.0', '<=4.1.31'] + 4.2.x: + time: ~ + versions: ['>=4.2.0', '<=4.2.22'] + 5.0.x: + time: ~ + versions: ['>=5.0.0', '<=5.0.35'] + 5.1.x: + time: ~ + versions: ['>=5.1.0', '<=5.1.46'] + 5.2.x: + time: ~ + versions: ['>=5.2.0', '<=5.2.45'] + 5.3.x: + time: ~ + versions: ['>=5.3.0', '<=5.3.31'] + 5.4.x: + time: ~ + versions: ['>=5.4.0', '<=5.4.36'] + 5.5.x: + time: 2018-08-07 18:07:12 + versions: ['>=5.5.0', '<5.5.42'] + 5.6.x: + time: 2018-08-07 07:53:14 + versions: ['>=5.6.0', '<5.6.30'] +reference: composer://laravel/framework