Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c1c10ca5 by Salvatore Bonaccorso at 2022-01-09T15:16:38+01:00
Track fixed version via unstable for CVE-2021-42740/node-shell-quote
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13439,7 +13439,7 @@ CVE-2021-42742
CVE-2021-42741
RESERVED
CVE-2021-42740 (The shell-quote package before 1.7.3 for Node.js allows
command inject ...)
- - node-shell-quote <unfixed> (bug #998418)
+ - node-shell-quote 1.7.3+~1.7.1-1 (bug #998418)
NOTE:
https://github.com/substack/node-shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe
(1.7.3)
CVE-2021-42739 (The firewire subsystem in the Linux kernel through 5.14.13 has
a buffe ...)
{DLA-2843-1}
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1c10ca5b5c1079ac44f09bdbd2832ac7b80fa54
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1c10ca5b5c1079ac44f09bdbd2832ac7b80fa54
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
