FEDORA-2023-5c6f32db6f — security update for yarnpkg

stable

FEDORA-2023-5c6f32db6f created by smani 4 months ago for Fedora 36

Update to 1.22.19. Backport patch for CVE-2021-35065 for bundled glob-parent.

sudo dnf upgrade --refresh --advisory=FEDORA-2023-5c6f32db6f

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

BZ#2156648 CVE-2021-35065 yarnpkg: glob-parent: Regular Expression Denial of Service [fedora-36]

BZ#2156654 CVE-2021-35065 yarnpkg: glob-parent: Regular Expression Denial of Service [fedora-37]

yarnpkg-1.22.19-2.fc36

ignored