From 41f3f6b215b41dc6418ceefa0c40dc543d171259 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Tue, 22 Mar 2022 06:51:48 +0100 Subject: Four CVEs for nodejs already fixed back with 12.22.9 upload --- data/CVE/list | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'data') diff --git a/data/CVE/list b/data/CVE/list index 55cba1ca96..cd7ad003a7 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -21551,24 +21551,24 @@ CVE-2021-44536 CVE-2021-44535 RESERVED CVE-2022-21824 (Due to the formatting logic of the "console.table()" function it was n ...) - - nodejs (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#prototype-pollution-via-console-table-properties-low-cve-2022-21824 NOTE: https://github.com/nodejs/node/commit/be69403528da99bf3df9e1dc47186f18ba59cb5e (v12.x) CVE-2021-44534 RESERVED CVE-2021-44533 (Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did ...) - - nodejs (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#incorrect-handling-of-certificate-subject-and-issuer-fields-medium-cve-2021-44533 NOTE: https://github.com/nodejs/node/commit/8c2db2c86baff110a1d905ed1e0dd4e1c4fd2dd1 (v12.x) CVE-2021-44532 (Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 conv ...) - - nodejs (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#certificate-verification-bypass-via-string-injection-medium-cve-2021-44532 NOTE: https://github.com/nodejs/node/commit/19873abfb24dce75ffff042efe76dc5633052677 (v12.x) CVE-2021-44531 (Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI ...) - - nodejs (bug #1004177) + - nodejs 12.22.9~dfsg-1 (bug #1004177) [stretch] - nodejs (Nodejs in stretch not covered by security support) NOTE: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/#improper-handling-of-uri-subject-alternative-names-medium-cve-2021-44531 NOTE: https://github.com/nodejs/node/commit/e0fe6a635e5929a364986a6c39dc3585b9ddcd85 (v12.x) -- cgit v1.2.3