bareos: master 9a1802de

Author Committer Branch Timestamp Parent
slederer Bareos Bot master 2025-11-13 18:21 master b9498a02 Pending
Changeset webui: use patched laminas packages

- the versions of laminas-form and laminas-http that are used by
  the Bareos WebUI have issues CVE-2022-23598 and CVE-2021-3007,
  since we cannon easily upgrade to the latest versions, we
  backported the security patches and use our own patched versions

- CVE-2022-23598 in laminas-form does not apply to versions older
  than 2.12.0, and we are using 2.6.0, so our version does not
  contain any patches but adds a description why the old
  version is not vulnerable (the CVE is actually incorrect about
  the affected versions, probably because nobody cared about
  versions that old)
mod - webui/composer.json Diff File
mod - webui/vendor/autoload.php Diff File
mod - webui/vendor/composer/ClassLoader.php Diff File
mod - webui/vendor/composer/InstalledVersions.php Diff File
mod - webui/vendor/composer/installed.json Diff File
mod - webui/vendor/composer/installed.php Diff File
mod - webui/vendor/composer/platform_check.php Diff File
mod - webui/vendor/laminas/laminas-form/README.md Diff File
mod - webui/vendor/laminas/laminas-http/src/Response/Stream.php Diff File