Merge pull request #524 from xabbuh/pr-522

[mautic/core] fix version constraints
FriendsOfPHP · Jan 18, 2021 · 0044247 · 0044247
2 parents 99a0a74 + 6c2c69a
commit 0044247
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 12 deletions.
diff --git a/mautic/core/CVE-2020-35124.yaml b/mautic/core/CVE-2020-35124.yaml
@@ -4,11 +4,14 @@ cve: CVE-2020-35124
 branches:
     '3.2':
         time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        versions: ['>=3.2.0', '<3.2.4']
     '3.1':
-        time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        time:     ~
+        versions: ['>=3.1.0', '<3.2.0']
+    '3.0':
+        time:     ~
+        versions: ['>=3.0.0', '<3.1.0']
     '2.16':
         time: 2021-01-14 17:07:00
-        versions: ['>=2.0.0', '<=2.16.4']
+        versions: ['>=2.0.0', '<2.16.5']
 reference: composer://mautic/core
diff --git a/mautic/core/CVE-2020-35125.yaml b/mautic/core/CVE-2020-35125.yaml
@@ -4,11 +4,14 @@ cve: CVE-2020-35125
 branches:
     '3.2':
         time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        versions: ['>=3.2.0', '<3.2.4']
     '3.1':
-        time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        time:     ~
+        versions: ['>=3.1.0', '<3.2.0']
+    '3.0':
+        time:     ~
+        versions: ['>=3.0.0', '<3.1.0']
     '2.16':
         time: 2021-01-14 17:07:00
-        versions: ['>=2.0.0', '<=2.16.4']
+        versions: ['>=2.0.0', '<2.16.5' ]
 reference: composer://mautic/core
diff --git a/mautic/core/CVE-2021-3142.yaml b/mautic/core/CVE-2021-3142.yaml
@@ -4,11 +4,14 @@ cve: CVE-2021-3142
 branches:
     '3.2':
         time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        versions: ['>=3.2.0', '<3.2.4']
     '3.1':
-        time:     2021-01-14 17:07:00
-        versions: ['<=3.2.3']
+        time:     ~
+        versions: ['>=3.1.0', '<3.2.0']
+    '3.0':
+        time:     ~
+        versions: ['>=3.0.0', '<3.1.0']
     '2.16':
         time: 2021-01-14 17:07:00
-        versions: ['>=2.0.0', '<=2.16.4']
+        versions: ['>=2.0.0', '<2.16.5']
 reference: composer://mautic/core