FEDORA-2024-6955bcc801 — security update for yarnpkg

obsolete

FEDORA-2024-6955bcc801 created by smani a year ago for Fedora 40

Update bundled elliptic to fix CVE-2024-48949.

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been obsoleted by yarnpkg-1.22.22-5.fc40.

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

a year ago

in testing

a year ago

Builds

BZ#2317790 CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification [fedora-40]

yarnpkg-1.22.22-4.fc40

ignored