[Git][security-tracker-team/security-tracker][master] CVE-2020-15168/node-fetch fixed in unstable upload

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fbcdc525 by Salvatore Bonaccorso at 2020-10-09T17:20:01+02:00
CVE-2020-15168/node-fetch fixed in unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24737,7 +24737,7 @@ CVE-2020-15169 (In Action View before versions 5.2.4.4 and 6.0.3.3 there is a po
 	NOTE: https://github.com/rails/rails/commit/aaa7ab1320330b3c4fa8f0fbda716dcfa21e3d65 (5.2)
 CVE-2020-15168 (node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the si ...)
 	[experimental] - node-fetch 2.6.1-1
-	- node-fetch <unfixed> (bug #970173)
+	- node-fetch 2.6.1-2 (bug #970173)
 	[buster] - node-fetch <ignored> (Minor issue; Intrusive to backport)
 	NOTE: https://github.com/node-fetch/node-fetch/security/advisories/GHSA-w7rc-rwvf-8q5r
 CVE-2020-15167 (In Miller (command line utility) using the configuration file support  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbcdc525abcc9fb366b00a0f8c55064203b03d54

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fbcdc525abcc9fb366b00a0f8c55064203b03d54
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201009/66e989ba/attachment.html>