[Git][security-tracker-team/security-tracker][master] node-elliptic fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2297d5d3 by Moritz Muehlenhoff at 2025-02-06T12:38:17+01:00
node-elliptic fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33830,7 +33830,7 @@ CVE-2024-49195 (Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun
 	[bullseye] - mbedtls <not-affected> (Introduced in 3.5.0)
 	NOTE: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/
 CVE-2024-48948 (The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementatio ...)
-	- node-elliptic <unfixed> (bug #1085298)
+	- node-elliptic 6.6.1+dfsg-1 (bug #1085298)
 	[bookworm] - node-elliptic <no-dsa> (Minor issue)
 	[bullseye] - node-elliptic <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/indutny/elliptic/issues/321



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2297d5d327d18e6fd03cc45a8c0ee4c095025c1b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2297d5d327d18e6fd03cc45a8c0ee4c095025c1b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250206/64e8edd8/attachment.htm>