Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1

To: Xavier Guimard <yadd@debian.org>, 934704@bugs.debian.org
Subject: Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Thu, 22 Aug 2019 21:19:33 +0100
Message-id: <[🔎] 92bc7a438939d2ace938eeb10282eb617cee371f.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 934704@bugs.debian.org
In-reply-to: <[🔎] 156571605240.29962.6023651431384377717.reportbug@mac-debian.lemonldap-ng.org>
References: <[🔎] 156571605240.29962.6023651431384377717.reportbug@mac-debian.lemonldap-ng.org> <[🔎] 156571605240.29962.6023651431384377717.reportbug@mac-debian.lemonldap-ng.org>

Control: tags -1 + confirmed

On Tue, 2019-08-13 at 19:07 +0200, Xavier Guimard wrote:
> node-lodash is vulnerable to prototype pollution (#933079,
> CVE-2019-10744). I imported upstream fix in the attached debdiff.

Please go ahead.

Regards,

Adam

Reply to:

References:
- Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1
  - From: Xavier Guimard <yadd@debian.org>

Prev by Date: Processed: tagging 935458, retitle 935458 to RM: pump -- RoST; unmaintained; security issues
Next by Date: Processed: Re: Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1
Previous by thread: Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1
Next by thread: Processed: Re: Bug#934704: buster-pu: package node-lodash/4.17.11+dfsg-2+deb10u1
Index(es):
- Date
- Thread