[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2021-42740/node-shell-quote

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Nov 3 21:46:29 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
77336c11 by Salvatore Bonaccorso at 2021-11-03T22:45:44+01:00
Add Debian bug reference for CVE-2021-42740/node-shell-quote

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2355,7 +2355,7 @@ CVE-2021-42742
 CVE-2021-42741
 	RESERVED
 CVE-2021-42740 (The shell-quote package before 1.7.3 for Node.js allows command inject ...)
-	- node-shell-quote <unfixed>
+	- node-shell-quote <unfixed> (bug #998418)
 	NOTE: https://github.com/substack/node-shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe (1.7.3)
 CVE-2021-42739 (The firewire subsystem in the Linux kernel through 5.14.13 has a buffe ...)
 	- linux 5.14.16-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77336c119c095b7aadb23fa87ab7e9d0e9f07c12

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/77336c119c095b7aadb23fa87ab7e9d0e9f07c12
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211103/1790e20a/attachment.htm>


More information about the debian-security-tracker-commits mailing list