View Issue Details

IDProjectCategoryView StatusLast Update
0029848mantisbtsecuritypublic2023-04-20 05:39
Reporterdregad Assigned Todregad  
PriorityhighSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version2.25.3Fixed in Version2.25.3 
Summary0029848: Update guzzlehttp/psr7 to 1.8.5
Description

Fixes a vulnerability (CVE-2022-24775), see https://github.com/mantisbt/mantisbt/security/dependabot/1

TagsNo tags attached.

Relationships

related to 0032432 closeddregad Update guzzlehttp/psr7 to 1.9.1 

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: dependabot/composer/guzzlehttp/psr7-1.8.5 d32c2417

2022-03-29 18:24

dependabot[bot]

Committer: dregad


Details Diff
Bump guzzlehttp/psr7 from 1.7.0 to 1.8.5

Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 1.7.0 to 1.8.5.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/1.8.5/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/1.7.0...1.8.5)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Fixes 0029848
Affected Issues
0029848
mod - composer.lock Diff File