Skip to content

Commit a3230ff

Browse files
authored
fix: update patch for SA-CONTRIB-2024-004 (#102)
It turns out the mistake here is a missing `.` in the version range rather than an extra leading zero, as evident by the advisory saying to install 12.0.5 as the solution, and the [changelog](https://www.drupal.org/project/social/releases/12.0.5) for that version saying it patches this
1 parent 48b22ad commit a3230ff

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

advisories/social/DSA-CONTRIB-2024-004.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,16 +22,16 @@
2222
"introduced": "0"
2323
},
2424
{
25-
"fixed": "12.5.0"
25+
"fixed": "12.0.5"
2626
}
2727
],
2828
"database_specific": {
29-
"constraint": "<12.5"
29+
"constraint": "<12.0.5"
3030
}
3131
}
3232
],
3333
"database_specific": {
34-
"affected_versions": "<12.5",
34+
"affected_versions": "<12.0.5",
3535
"patched": true
3636
}
3737
}

patches.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ field_affected_versions = [
3838
[SA-CONTRIB-2024-004]
3939
field_affected_versions = [
4040
'<12.05',
41-
'<12.5'
41+
'<12.0.5'
4242
]
4343

4444
[SA-CONTRIB-2024-038]

0 commit comments

Comments
 (0)