[Git][security-tracker-team/security-tracker][master] node-minimatch spu

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 20 23:41:27 BST 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d4ea407c by Moritz Mühlenhoff at 2022-10-21T00:40:53+02:00
node-minimatch spu

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1318,6 +1318,7 @@ CVE-2022-42920
 	RESERVED
 CVE-2022-3517 (A vulnerability was found in the minimatch package. This flaw allows a ...)
 	- node-minimatch 3.0.5+~3.0.5-1
+	[bullseye] - node-minimatch <no-dsa> (Minor issue)
 	NOTE: https://github.com/grafana/grafana-image-renderer/issues/329
 	NOTE: https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6 (v3.0.5)
 CVE-2022-3516


=====================================
data/next-point-update.txt
=====================================
@@ -36,3 +36,5 @@ CVE-2022-37616
 	[bullseye] - node-xmldom 0.5.0-1+deb11u1
 CVE-2022-22846
 	[bullseye] - python-dnslib 0.9.14-1+deb11u1
+CVE-2022-3517
+	[bullseye] - node-minimatch 3.0.4+~3.0.3-1+deb11u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ea407ce376591dc3dbf5503469c4d0c6e9d68f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ea407ce376591dc3dbf5503469c4d0c6e9d68f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221020/9c36a2e2/attachment.htm>


More information about the debian-security-tracker-commits mailing list