Bug 24598

Summary: nodejs-handlebars new security issue fixed upstream in 4.0.13
Product: Mageia Reporter: David Walser <luigiwalser>
Component: SecurityAssignee: Stig-Ørjan Smelror <smelror>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: major    
Priority: Normal    
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: nodejs-handlebars-4.0.11-3.mga7.src.rpm CVE:
Status comment:

Description David Walser 2019-03-30 18:39:37 CET
Fedora has issued an advisory on March 29:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FPTUTMZHMXSZYOT3UXEIOJO2BBGRZJGC/

The issue is fixed upstream in 4.0.13.
Comment 1 David Walser 2019-06-23 19:18:49 CEST
We have 4.0.13 in Cauldron.

Resolution: (none) => FIXED
Status: NEW => RESOLVED