Processed: Re: Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

Processing control commands: > tags -1 + confirmed Bug #1003765 [release.debian.org] bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1 Added tag(s) confirmed. -- 1003765: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003765 Debian Bug Tracking System Contact

Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

Control: tags -1 + confirmed On Sat, 2022-01-15 at 12:52 +0100, Yadd wrote: > [ Reason ] > node-markdown-it is vulnerable to regex denial of service > (CVE-2022-21670) > Please go ahead. Regards, Adam

Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

On 15/01/2022 12:52, Yadd wrote: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-markdown-it is vulnerable to regex denial of service (CVE-2022-21670) [ Impact ] Little security issue [ Tests ] Test passed

Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-markdown-it is vulnerable to regex denial of service (CVE-2022-21670) [ Impact ] Little security issue [ Tests ] Test passed [ Risks ] Low risk, just a better