[Git][security-tracker-team/security-tracker][master] node-sha.js fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ac7f6b4 by Moritz Muehlenhoff at 2025-09-14T20:35:17+02:00
node-sha.js fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7033,7 +7033,7 @@ CVE-2025-XXXX [OSSN-0094]
 	NOTE: default policy is only possible to create the inconsistent state described in
 	NOTE: the OSSN-0094 if one has admin rights on the relevant OpenStack project.
 CVE-2025-9288 (Improper Input Validation vulnerability in sha.js allows Input Data Ma ...)
-	- node-sha.js <unfixed> (bug #1111769)
+	- node-sha.js 2.4.12+~3.0.5-1 (bug #1111769)
 	NOTE: https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5
 	NOTE: https://github.com/browserify/sha.js/pull/78
 	NOTE: Fixed by: https://github.com/browserify/sha.js/commit/f2a258e9f2d0fcd113bfbaa49706e1ac0d979ba5 (v2.4.12)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ac7f6b42432111bdecc834f8dc387e982b76d88

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ac7f6b42432111bdecc834f8dc387e982b76d88
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250914/95aa967d/attachment-0001.htm>