[Git][security-tracker-team/security-tracker][master] Reserve DLA-4413-1 for node-url-parse

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0fe230c1 by Utkarsh Gupta at 2025-12-16T20:06:50+05:30
Reserve DLA-4413-1 for node-url-parse

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -350828,7 +350828,6 @@ CVE-2022-0640 (The Pricing Table Builder WordPress plugin before 1.1.5 does not
 CVE-2022-0639 (Authorization Bypass Through User-Controlled Key in NPM url-parse prio ...)
 	{DLA-3336-1}
 	- node-url-parse 1.5.7-1
-	[bullseye] - node-url-parse <no-dsa> (Minor issue)
 	[stretch] - node-url-parse <end-of-life> (Nodejs in stretch not covered by security support)
 	NOTE: https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155
 	NOTE: https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788 (1.5.7)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[16 Dec 2025] DLA-4413-1 node-url-parse - security update
+	{CVE-2022-0639}
+	[bullseye] - node-url-parse 1.5.3-1+deb11u3
 [16 Dec 2025] DLA-4412-1 glib2.0 - security update
 	{CVE-2025-4373 CVE-2025-7039 CVE-2025-13601 CVE-2025-14087 CVE-2025-14512}
 	[bullseye] - glib2.0 2.66.8-1+deb11u7


=====================================
data/dla-needed.txt
=====================================
@@ -266,9 +266,6 @@ netty (rouca)
   NOTE: 20251115: Partial release for sid. Fix all CVEs except CVE-2025-58056 (rouca)
   NOTE: 20251127: all CVEs fixed under sid (rouca)
 --
-node-url-parse (utkarsh)
-  NOTE: 20251206: Added by Front-Desk. For avoiding regression from bullseye (rouca/front desk)
---
 nova
   NOTE: 20250908: Added by Front-Desk (apo)
   NOTE: 20250908: See also watcher. Consider fixing postponed issues and sync



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fe230c1524f67939649efdf16c1a3c913ea1733

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fe230c1524f67939649efdf16c1a3c913ea1733
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251216/3df485a2/attachment.htm>