Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Fedora 30: FEDORA-2020-1f1c94907b Critical Alert on nodejs-set-value Issues

fedora
Calendar Grey February 7, 2020
Dist Fedora Esm H88
Enhance nodejs-set-value to mitigate CVE-2019-10747 in Fedora 30. Urgent update advisory and further information included.
Update to upstream 2.0.1 release for CVE-2019-10747

Summary

Create nested values and any intermediaries using dot notation (a.b.c) paths.

Update to upstream 2.0.1 release for CVE-2019-10747

* Thu Jan 30 2020 Jared K. Smith - 2.0.1-1

- Update to upstream 2.0.1 release for CVE-2019-10747

* Wed Jan 29 2020 Fedora Release Engineering - 2.0.0-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Thu Jul 25 2019 Fedora Release Engineering - 2.0.0-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[ 1 ] Bug #1795479 - CVE-2019-10747 nodejs-set-value: prototype pollution in function set-value

https://bugzilla.redhat.com/show_bug.cgi?id=1795479

su -c 'dnf upgrade --advisory FEDORA-2020-1f1c94907b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 2.0.1
Release: 1.fc30
Summary: Create nested values and any intermediaries using dot notation (a.b.c) paths

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here