UbuntuUpdates.org

Package "node-minimatch"

Name: node-minimatch

Description:

Convert glob expressions into RegExp objects for Node.js
Latest version: 3.0.4-4ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Homepage: https://github.com/isaacs/minimatch

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "node-minimatch"

All arch deb package
APT INSTALL

Other versions of "node-minimatch" in Focal

Repository Area Version
base universe 3.0.4-4
updates universe 3.0.4-4ubuntu0.1

Changelog

Version: 3.0.4-4ubuntu0.1 2023-05-18 11:07:09 UTC

  node-minimatch (3.0.4-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2022-3517.patch: fixed a regular expression denial
      of service in braceExpand function
    - CVE-2022-3517

 -- Amir Naseredini <email address hidden> Wed, 17 May 2023 10:51:15 +0100
CVE-2022-3517 A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand func


About   -   Send Feedback to @ubuntu_updates