906136 – <www-apps/piwigo-13.7.0: Multiple SQL injections

Bug 906136 - <www-apps/piwigo-13.7.0: Multiple SQL injections

Summary: <www-apps/piwigo-13.7.0: Multiple SQL injections

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All All

Importance:	Normal trivial (vote)
Assignee:	Gentoo Security

URL:	https://piwigo.org/release-13.7.0
Whiteboard:	~4 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2023-05-11 12:18 UTC by Alexander Bezrukov
Modified:	2023-05-26 04:45 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bezrukov 2023-05-11 12:18:56 UTC

Multiple vulnerabilities of SQL injection type were fixed in the 13.7.0 release.

No CVEs assigned, details can be found below:
https://github.com/Piwigo/Piwigo/issues/1876
https://github.com/Piwigo/Piwigo/issues/1910
https://github.com/Piwigo/Piwigo/issues/1911

Revbumping is as easy as renaming the ebuild.

Comment 1 John Helmert III archtester

2023-05-26 04:45:48 UTC

Thanks. No GLSA, all done.