Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8ac7f6b4 by Moritz Muehlenhoff at 2025-09-14T20:35:17+02:00
node-sha.js fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7033,7 +7033,7 @@ CVE-2025-XXXX [OSSN-0094]
NOTE: default policy is only possible to create the inconsistent state
described in
NOTE: the OSSN-0094 if one has admin rights on the relevant OpenStack
project.
CVE-2025-9288 (Improper Input Validation vulnerability in sha.js allows Input
Data Ma ...)
- - node-sha.js <unfixed> (bug #1111769)
+ - node-sha.js 2.4.12+~3.0.5-1 (bug #1111769)
NOTE:
https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5
NOTE: https://github.com/browserify/sha.js/pull/78
NOTE: Fixed by:
https://github.com/browserify/sha.js/commit/f2a258e9f2d0fcd113bfbaa49706e1ac0d979ba5
(v2.4.12)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ac7f6b42432111bdecc834f8dc387e982b76d88
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ac7f6b42432111bdecc834f8dc387e982b76d88
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
