Update to upstream 1.1.7 release to remediate DoS issue npm:brace-expansion:20170302
Please login to add feedback.
| submitted | 2 years ago |
| in testing | 2 years ago |
| -1 | 0 | #1448380 CVE-2017-18077 nodejs-brace-expansion: Regular expression denial-of-service |
jsmith
This update has been submitted for testing by jsmith.
This update has been pushed to testing.
Works for me
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
I'm getting:
Error: nothing provides npm(balanced-match) >= 0.4.1 needed by nodejs-brace-expansion-1.1.7-1.fc25.noarchnpm(balanced-match)is provided bynodejs-balanced-matchand I have only the 0.3.0 version.Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.