Update Composer dependencies - Githubissues

OpenConext / Stepup-tiqr

tiqr IdP for step-up authentication

Apache License 2.0

3 stars 2 forks source link

Update Composer dependencies #67

Closed MKodde closed 5 years ago

MKodde commented 5 years ago

This is the product of a full composer update. This hardens Tiqr against:

CVE-2018-19789: CVE-2018-19789: Temporary uploaded file path disclosure https://symfony.com/cve-2018-19789
CVE-2018-19790: CVE-2018-19790: Open Redirect Vulnerability on login https://symfony.com/cve-2018-19790

In addition, it updates the other packages to their latest versions within the version restrictions that apply.