Merge pull request #714 from ggiala/CVE-2022-23601-refactor

Refactor affected versions in CVE-2022-23601 to make the fix version more explicit
FriendsOfPHP · Mar 8, 2024 · e672847 · e672847
2 parents 6afe359 + 0eb1df9
commit e672847
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/symfony/framework-bundle/CVE-2022-23601.yaml b/symfony/framework-bundle/CVE-2022-23601.yaml
@@ -4,11 +4,11 @@ cve:       CVE-2022-23601
 branches:
     5.3.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=5.3.14', '<=5.3.14']
+        versions: ['>=5.3.14', '<5.3.15']
     5.4.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=5.4.3', '<=5.4.3']
+        versions: ['>=5.4.3', '<5.4.4']
     6.0.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=6.0.3', '<=6.0.3']
+        versions: ['>=6.0.3', '<6.0.4']
 reference: composer://symfony/framework-bundle
diff --git a/symfony/symfony/CVE-2022-23601.yaml b/symfony/symfony/CVE-2022-23601.yaml
@@ -5,11 +5,11 @@ cve:       CVE-2022-23601
 branches:
     5.3.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=5.3.14', '<=5.3.14']
+        versions: ['>=5.3.14', '<5.3.15']
     5.4.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=5.4.3', '<=5.4.3']
+        versions: ['>=5.4.3', '<5.4.4']
     6.0.x:
         time:     2022-01-29 12:00:00
-        versions: ['>=6.0.3', '<=6.0.3']
+        versions: ['>=6.0.3', '<6.0.4']
 reference: composer://symfony/symfony