Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0fe230c1 by Utkarsh Gupta at 2025-12-16T20:06:50+05:30
Reserve DLA-4413-1 for node-url-parse
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -350828,7 +350828,6 @@ CVE-2022-0640 (The Pricing Table Builder WordPress
plugin before 1.1.5 does not
CVE-2022-0639 (Authorization Bypass Through User-Controlled Key in NPM
url-parse prio ...)
{DLA-3336-1}
- node-url-parse 1.5.7-1
- [bullseye] - node-url-parse <no-dsa> (Minor issue)
[stretch] - node-url-parse <end-of-life> (Nodejs in stretch not covered
by security support)
NOTE: https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155
NOTE:
https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788
(1.5.7)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[16 Dec 2025] DLA-4413-1 node-url-parse - security update
+ {CVE-2022-0639}
+ [bullseye] - node-url-parse 1.5.3-1+deb11u3
[16 Dec 2025] DLA-4412-1 glib2.0 - security update
{CVE-2025-4373 CVE-2025-7039 CVE-2025-13601 CVE-2025-14087
CVE-2025-14512}
[bullseye] - glib2.0 2.66.8-1+deb11u7
=====================================
data/dla-needed.txt
=====================================
@@ -266,9 +266,6 @@ netty (rouca)
NOTE: 20251115: Partial release for sid. Fix all CVEs except CVE-2025-58056
(rouca)
NOTE: 20251127: all CVEs fixed under sid (rouca)
--
-node-url-parse (utkarsh)
- NOTE: 20251206: Added by Front-Desk. For avoiding regression from bullseye
(rouca/front desk)
---
nova
NOTE: 20250908: Added by Front-Desk (apo)
NOTE: 20250908: See also watcher. Consider fixing postponed issues and sync
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fe230c1524f67939649efdf16c1a3c913ea1733
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0fe230c1524f67939649efdf16c1a3c913ea1733
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
