FEDORA-2024-65994e5cbf — security update for yarnpkg

obsolete

FEDORA-2024-65994e5cbf created by smani a year ago for Fedora 39

Update bundled dependencies to fix CVE-2024-48949.

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update has been obsoleted by yarnpkg-1.22.22-5.fc39.

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

a year ago

Builds

BZ#2317789 CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification [fedora-39]

yarnpkg-1.22.22-4.fc39

ignored