UbuntuUpdates.org

Package "node-minimatch"

Name: node-minimatch

Description:

Convert glob expressions into RegExp objects for Node.js

Latest version: 3.0.4-4ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Homepage: https://github.com/isaacs/minimatch

Links


Download "node-minimatch"


Other versions of "node-minimatch" in Focal

Repository Area Version
base universe 3.0.4-4
updates universe 3.0.4-4ubuntu0.1

Changelog

Version: 3.0.4-4ubuntu0.1 2023-05-18 11:07:09 UTC

  node-minimatch (3.0.4-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2022-3517.patch: fixed a regular expression denial
      of service in braceExpand function
    - CVE-2022-3517

 -- Amir Naseredini <email address hidden> Wed, 17 May 2023 10:51:15 +0100

CVE-2022-3517 A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand func



About   -   Send Feedback to @ubuntu_updates