stable

yarnpkg-1.22.22-9.fc42

FEDORA-2025-96ff8c2897 created by smani 10 months ago for Fedora 42

Update bundled pbkdf2 library.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-96ff8c2897

This update has been submitted for testing by smani.

10 months ago

This update's test gating status has been changed to 'ignored'.

10 months ago

This update has been pushed to testing.

10 months ago

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
10 months ago
in testing
10 months ago
in stable
9 months ago
approved
9 months ago
Builds
1
yarnpkg-1.22.22-9.fc42
BZ#2374429 CVE-2025-6547 yarnpkg: pbkdf2 silently returns static keys [epel-8]
0
0
BZ#2374433 CVE-2025-6545 yarnpkg: pbkdf2 silently returns predictable key material [epel-8]
0
0
BZ#2374438 CVE-2025-6547 yarnpkg: pbkdf2 silently returns static keys [epel-9]
0
0
BZ#2374443 CVE-2025-6545 yarnpkg: pbkdf2 silently returns predictable key material [epel-9]
0
0
BZ#2374450 CVE-2025-6547 yarnpkg: pbkdf2 silently returns static keys [fedora-41]
0
0
BZ#2374455 CVE-2025-6545 yarnpkg: pbkdf2 silently returns predictable key material [fedora-41]
0
0
BZ#2374462 CVE-2025-6547 yarnpkg: pbkdf2 silently returns static keys [fedora-42]
0
0
BZ#2374465 CVE-2025-6545 yarnpkg: pbkdf2 silently returns predictable key material [fedora-42]
0
0
yarnpkg-1.22.22-9.fc42

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 25.11.3 on bodhi-web-21-hcnm2.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •