Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1

To: Xavier Guimard <yadd@debian.org>, 954835@bugs.debian.org
Subject: Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Sat, 28 Mar 2020 12:40:28 +0000
Message-id: <[🔎] d669c44c9681fda2a82c67a37a06126658a78d0d.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 954835@bugs.debian.org
In-reply-to: <[🔎] 158504401215.1260999.7993837002587808630.reportbug@deb007.xnr.fr>
References: <[🔎] 158504401215.1260999.7993837002587808630.reportbug@deb007.xnr.fr> <[🔎] 158504401215.1260999.7993837002587808630.reportbug@deb007.xnr.fr>

Control: tags -1 + confirmed

On Tue, 2020-03-24 at 11:00 +0100, Xavier Guimard wrote:
> node-yargs-parser is vulnerable to prototype pollution. I fixed it
> and added a basic test taken from [1].
> 

+node-yargs-parser (11.1.1-1+deb10u1) unstable; urgency=medium

You want "buster" there, not "unstable".

Please go ahead.

Regards,

Adam

Reply to:

References:
- Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1
  - From: Xavier Guimard <yadd@debian.org>

Prev by Date: Bug#954988: marked as done (stretch-pu: package node-knockout/3.4.2-2+deb9u1)
Next by Date: Processed: Re: Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1
Previous by thread: Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1
Next by thread: Processed: Re: Bug#954835: buster-pu: package node-yargs-parser/11.1.1-1+deb10u1
Index(es):
- Date
- Thread