From d0cc3f545752136818b059cb048ba47f15af41a3 Mon Sep 17 00:00:00 2001 From: Robin Gustafsson <robin@rgson.se> Date: Tue, 28 Dec 2021 13:28:57 +0100 Subject: [PATCH] Update changelog --- debian/changelog | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/debian/changelog b/debian/changelog index 55244d376c..6dde1bb8e2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,12 @@ +php-laravel-framework (6.20.14+dfsg-2+deb11u1) bullseye; urgency=high + + * Fix security issue: XSS vulnerability in the Blade templating engine + (CVE-2021-43808, Closes: #1001333) + * Fix security issue: Failure to block the upload of executable PHP content + (CVE-2021-43617, Closes: #1002728) + + -- Robin Gustafsson <robin@rgson.se> Sun, 02 Jan 2022 19:58:35 +0100 + php-laravel-framework (6.20.14+dfsg-2) unstable; urgency=medium * Fix security issue: SQL injection with Microsoft SQL Server -- GitLab