[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2021-42740/node-shell-quote

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c1c10ca5 by Salvatore Bonaccorso at 2022-01-09T15:16:38+01:00
Track fixed version via unstable for CVE-2021-42740/node-shell-quote

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13439,7 +13439,7 @@ CVE-2021-42742
 CVE-2021-42741
 	RESERVED
 CVE-2021-42740 (The shell-quote package before 1.7.3 for Node.js allows command inject ...)
-	- node-shell-quote <unfixed> (bug #998418)
+	- node-shell-quote 1.7.3+~1.7.1-1 (bug #998418)
 	NOTE: https://github.com/substack/node-shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe (1.7.3)
 CVE-2021-42739 (The firewire subsystem in the Linux kernel through 5.14.13 has a buffe ...)
 	{DLA-2843-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1c10ca5b5c1079ac44f09bdbd2832ac7b80fa54

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c1c10ca5b5c1079ac44f09bdbd2832ac7b80fa54
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220109/ecd4a69e/attachment.htm>