Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2297d5d3 by Moritz Muehlenhoff at 2025-02-06T12:38:17+01:00
node-elliptic fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -33830,7 +33830,7 @@ CVE-2024-49195 (Mbed TLS 3.5.x through 3.6.x before
3.6.2 has a buffer underrun
[bullseye] - mbedtls <not-affected> (Introduced in 3.5.0)
NOTE:
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/
CVE-2024-48948 (The Elliptic package 6.5.7 for Node.js, in its for ECDSA
implementatio ...)
- - node-elliptic <unfixed> (bug #1085298)
+ - node-elliptic 6.6.1+dfsg-1 (bug #1085298)
[bookworm] - node-elliptic <no-dsa> (Minor issue)
[bullseye] - node-elliptic <postponed> (Minor issue; can be fixed in
next update)
NOTE: https://github.com/indutny/elliptic/issues/321
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2297d5d327d18e6fd03cc45a8c0ee4c095025c1b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2297d5d327d18e6fd03cc45a8c0ee4c095025c1b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
