diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2022-03-22 06:51:48 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2022-03-22 06:51:48 +0100 |
| commit | 41f3f6b215b41dc6418ceefa0c40dc543d171259 (patch) | |
| tree | 237f1e0be8e57f67551ba5cd67de46f1df62d997 /data | |
| parent | e6377a3e2bd9f60269377d1f83161ba50779871d (diff) | |
Four CVEs for nodejs already fixed back with 12.22.9 upload
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/data/CVE/list b/data/CVE/list index 55cba1ca96..cd7ad003a7 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -21551,24 +21551,24 @@ CVE-2021-44536 CVE-2021-44535 RESERVED CVE-2022-21824 (Due to the formatting logic of the "console.table()" function it was n ...) - - nodejs <unfixed> (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#prototype-pollution-via-console-table-properties-low-cve-2022-21824 NOTE: https://github.com/nodejs/node/commit/be69403528da99bf3df9e1dc47186f18ba59cb5e (v12.x) CVE-2021-44534 RESERVED CVE-2021-44533 (Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did ...) - - nodejs <unfixed> (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#incorrect-handling-of-certificate-subject-and-issuer-fields-medium-cve-2021-44533 NOTE: https://github.com/nodejs/node/commit/8c2db2c86baff110a1d905ed1e0dd4e1c4fd2dd1 (v12.x) CVE-2021-44532 (Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 conv ...) - - nodejs <unfixed> (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#certificate-verification-bypass-via-string-injection-medium-cve-2021-44532 NOTE: https://github.com/nodejs/node/commit/19873abfb24dce75ffff042efe76dc5633052677 (v12.x) CVE-2021-44531 (Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI ...) - - nodejs <unfixed> (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs <end-of-life> (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#improper-handling-of-uri-subject-alternative-names-medium-cve-2021-44531 NOTE: https://github.com/nodejs/node/commit/e0fe6a635e5929a364986a6c39dc3585b9ddcd85 (v12.x) |