FEDORA-2025-f68a9b835d — security update for nodejs-bash-language-server and nodejs-pnpm

stable

nodejs-bash-language-server-5.6.0-1.fc40 and nodejs-pnpm-10.9.0-1.fc40

FEDORA-2025-f68a9b835d created by asn 7 months ago for Fedora 40

Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-f68a9b835d

This update's test gating status has been changed to 'waiting'.

7 months ago

This update's test gating status has been changed to 'ignored'.

7 months ago

This update has been submitted for testing by bodhi.

7 months ago

This update has been pushed to testing.

7 months ago

This update has been submitted for stable by bodhi.

6 months ago

This update has been pushed to stable.

6 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

7 months ago

in testing

7 months ago

in stable

6 months ago

approved

6 months ago

Builds

nodejs-bash-language-server-5.6.0-1.fc40

nodejs-pnpm-10.9.0-1.fc40

BZ#2361974 CVE-2024-47829 nodejs-pnpm: pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting [fedora-40]

nodejs-bash-language-server-5.6.0-1.fc40

nodejs-pnpm-10.9.0-1.fc40

Automated Test Results

ignored