[Git][security-tracker-team/security-tracker][master] nodejs fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Oct 13 13:34:02 BST 2021
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
81a9ece6 by Moritz Muehlenhoff at 2021-10-13T14:33:38+02:00
nodejs fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47003,12 +47003,12 @@ CVE-2021-22961
RESERVED
CVE-2021-22960 [HTTP Request Smuggling when parsing the body]
RESERVED
- - nodejs <unfixed>
+ - nodejs 12.22.7~dfsg-1
[stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support)
NOTE: https://nodejs.org/en/blog/vulnerability/oct-2021-security-releases/#http-request-smuggling-when-parsing-the-body-medium-cve-2021-22960
CVE-2021-22959 [HTTP Request Smuggling due to spaced in headers]
RESERVED
- - nodejs <unfixed>
+ - nodejs 12.22.7~dfsg-1
[stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support)
NOTE: https://nodejs.org/en/blog/vulnerability/oct-2021-security-releases/#http-request-smuggling-due-to-spaced-in-headers-medium-cve-2021-22959
CVE-2021-22958 (A Server-Side Request Forgery vulnerability was found in concrete5 < ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81a9ece68590bd13f9cba4397fad1bb50819e76f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81a9ece68590bd13f9cba4397fad1bb50819e76f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211013/0d587206/attachment.htm>
More information about the debian-security-tracker-commits
mailing list