#1008162 bullseye-pu: package node-minimist/1.2.5+~cs5.3.1-2+deb11u1

Package:
release.debian.org
Source:
release.debian.org
Submitter:
Yadd
Date:
2022-07-09 10:51:42 UTC
Severity:
normal
Tags:
#1008162#5
Date:
2022-03-23 11:36:34 UTC
From:
To:
[ Reason ]
node-minimist is vulnerable to a prototype pollution not totally fixed
by CVE-2020-7598 patch (pushed in 1.2.5-1 and 1.2.0-1+deb10u1)

[ Impact ]
Medium vulnerability

[ Tests ]
Test updated by upstream, passed

[ Risks ]
Low risk, patch is trivial

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
Better object check

Cheers,
Yadd
#1008162#10
Date:
2022-05-28 20:14:16 UTC
From:
To:
Control: tags -1 + confirmed

Please go ahead.

Regards,

Adam
#1008162#17
Date:
2022-05-29 18:02:24 UTC
From:
To:
package release.debian.org
tags 1008162 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: node-minimist
Version: 1.2.5+~cs5.3.1-2+deb11u1

Explanation: fix prototype pollution issue [CVE-2021-44906]
#1008162#22
Date:
2022-05-29 18:02:24 UTC
From:
To:
package release.debian.org
tags 1008162 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: node-minimist
Version: 1.2.5+~cs5.3.1-2+deb11u1

Explanation: fix prototype pollution issue [CVE-2021-44906]
#1008162#27
Date:
2022-07-09 10:47:43 UTC
From:
To:
(re-sending with fixed bug numbers)

Hi,

The updates discussed in these bugs were included in today's bullseye
point release.

Regards,

Adam