[Pkg-javascript-commits] [node-coveralls] 255/332: Bump `request` NPM module to fix security issue

Bastien Roucariès rouca at moszumanska.debian.org
Thu Nov 9 13:54:08 UTC 2017


This is an automated email from the git hooks/post-receive script.

rouca pushed a commit to branch master
in repository node-coveralls.

commit 742efbb6aa7d87b65dd11c3a84b540a2be92d310
Author: Joe Pettersson <joe8bit at gmail.com>
Date:   Tue Mar 29 13:11:39 2016 +0100

    Bump `request` NPM module to fix security issue
    
    There is a remote memory exposure vulnerability in
    the current version of `request`. This bumps that
    version to the latest current as well as bumping
    the core packages patch version.
    
    Details here:
    https://snyk.io/vuln/npm:request:20160119
---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 9ccba52..f10a782 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,7 @@
     "coverage",
     "coveralls"
   ],
-  "version": "2.11.9",
+  "version": "2.11.10",
   "bugs": {
     "url": "https://github.com/nickmerwin/node-coveralls/issues"
   },
@@ -32,7 +32,7 @@
     "js-yaml": "3.0.1",
     "lcov-parse": "0.0.6",
     "log-driver": "1.2.4",
-    "request": "2.67.0",
+    "request": "2.69.0",
     "minimist": "1.2.0"
   },
   "devDependencies": {

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-javascript/node-coveralls.git



More information about the Pkg-javascript-commits mailing list