[Git][security-tracker-team/security-tracker][master] Add CVE-2016-10541/node-shell-quote

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3e4158b7 by Salvatore Bonaccorso at 2018-06-10T22:15:23+02:00
Add CVE-2016-10541/node-shell-quote

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -36756,7 +36756,9 @@ CVE-2016-10543 (call is an HTTP router that is primarily used by the hapi framew
 CVE-2016-10542 (ws is a "simple to use, blazing fast and thoroughly tested websocket ...)
 	TODO: check
 CVE-2016-10541 (The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ...)
-	TODO: check
+	- node-shell-quote <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://nodesecurity.io/advisories/117
+	NOTE: nodejs not covered by security support
 CVE-2016-10540 (Minimatch is a minimal matching utility that works by converting glob ...)
 	TODO: check
 CVE-2016-10539 (negotiator is an HTTP content negotiator for Node.js and is used by ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3e4158b7fea688bd5b425da5aa9736b3f6a53c58

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3e4158b7fea688bd5b425da5aa9736b3f6a53c58
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180610/d5b72735/attachment.html>