Bug#947172: buster-pu: package npm/5.8.0+ds6-4+deb10u1

2020-04-25 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sun, 2019-12-22 at 14:14 +0100, Xavier Guimard wrote: > npm is vulnerable to some CVEs (CVE-2019-16775, CVE-2019-16776, > CVE-2019-16777). This patch groups patches from differents sub > modules affected and add a new module (npm-normalize-package-bin > package)

Processed: Re: Bug#947172: buster-pu: package npm/5.8.0+ds6-4+deb10u1

2020-04-25 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #947172 [release.debian.org] buster-pu: package npm/5.8.0+ds6-4+deb10u1 Added tag(s) confirmed. -- 947172: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947172 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#947172: buster-pu: package npm/5.8.0+ds6-4+deb10u1

2019-12-22 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, npm is vulnerable to some CVEs (CVE-2019-16775, CVE-2019-16776, CVE-2019-16777). This patch groups patches from differents sub modules affected and add a new module