[Git][security-tracker-team/security-tracker][master] npm fixed in sid
Moritz Muehlenhoff
jmm at debian.org
Fri Jul 10 18:15:41 BST 2020
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
60736ffd by Moritz Muehlenhoff at 2020-07-10T19:15:22+02:00
npm fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1208,7 +1208,7 @@ CVE-2020-15097
CVE-2020-15096 (In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, the ...)
- electron <itp> (bug #842420)
CVE-2020-15095 (Versions of the npm CLI prior to 6.14.6 are vulnerable to an informati ...)
- - npm <unfixed> (low; bug #964746)
+ - npm 6.14.6+ds-1 (low; bug #964746)
[buster] - npm <no-dsa> (Minor issue)
NOTE: https://github.com/npm/cli/security/advisories/GHSA-93f3-23rq-pjfp
NOTE: https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60736ffda1f90abb8d2c7b66663a841caa09957d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60736ffda1f90abb8d2c7b66663a841caa09957d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200710/dee8d371/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list