Bug#969348: buster-pu: package node-bl/1.1.2-1+deb10u1

2020-09-19 Thread Adam D. Barratt
Control: tags -1 + confirmed On Mon, 2020-08-31 at 21:09 +0200, Xavier Guimard wrote: > node-bl is vunerable to CVE-2020-8244 (#969309): A buffer over-read > vulnerability exists which could allow an attacker to supply user > input (even typed) that if it ends up in consume() argument and can > be

Processed: Re: Bug#969348: buster-pu: package node-bl/1.1.2-1+deb10u1

2020-09-19 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #969348 [release.debian.org] buster-pu: package node-bl/1.1.2-1+deb10u1 Added tag(s) confirmed. -- 969348: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969348 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#969348: buster-pu: package node-bl/1.1.2-1+deb10u1

2020-08-31 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-bl is vunerable to CVE-2020-8244 (#969309): A buffer over-read vulnerability exists which could allow an attacker to supply user input (even typed) that if it ends up