Hi

[Disclaimer, not part of the release team]

On Sun, Apr 25, 2021 at 02:13:47PM +0200, Yadd wrote:
> Package: release.debian.org
> Severity: normal
> Tags: buster
> User: release.debian....@packages.debian.org
> Usertags: pu
> 
> [ Reason ]
> rode-redis is vulnerable ro ReDoS (CVE-2021-29469
> 
> [ Impact ]
> Medium risk
> 
> [ Tests ]
> No
> 
> [ Risks ]
> No risk, node-redis has no reverse dependencies and patch is trivial
> 
> [ Checklist ]
>   [X] *all* changes are documented in the d/changelog
>   [X] I reviewed all changes and I approve them
>   [X] attach debdiff against the package in (old)stable
>   [X] the issue is verified as fixed in unstable
> 
> [ Changes ]
> Regex update
> 
> Cheers,
> Yadd

> diff --git a/debian/changelog b/debian/changelog
> index e865de4..5994010 100644
> --- a/debian/changelog
> +++ b/debian/changelog
> @@ -1,3 +1,9 @@
> +node-redis (2.8.0-1+deb10u1) unstable; urgency=medium

Target distribution should be buster here.

Regards,
Salvatore

Reply via email to