FEDORA-2023-5c6f32db6f — security update for yarnpkg

stable

FEDORA-2023-5c6f32db6f created by smani a year ago for Fedora 36

Update to 1.22.19. Backport patch for CVE-2021-35065 for bundled glob-parent.

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-5c6f32db6f

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

Builds

BZ#2156648 CVE-2021-35065 yarnpkg: glob-parent: Regular Expression Denial of Service [fedora-36]

BZ#2156654 CVE-2021-35065 yarnpkg: glob-parent: Regular Expression Denial of Service [fedora-37]

yarnpkg-1.22.19-2.fc36

ignored