UbuntuUpdates.org

Package "node-sha.js"

Name: node-sha.js

Description:

Streamable SHA hashes in pure javascript
Latest version: 2.4.11+~2.4.0-1ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: https://github.com/crypto-browserify/sha.js

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "node-sha.js"

All arch deb package
APT INSTALL

Other versions of "node-sha.js" in Jammy

Repository Area Version
base universe 2.4.11+~2.4.0-1
updates universe 2.4.11+~2.4.0-1ubuntu0.1

Changelog

Version: 2.4.11+~2.4.0-1ubuntu0.1 2025-09-25 17:07:35 UTC

  node-sha.js (2.4.11+~2.4.0-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: improper input validation
    - debian/patches/CVE-2025-9288-1.patch: Validate input types in hash.js.
    - debian/patches/CVE-2025-9288-2.patch: Embed to-buffer.js and its
      dependencies in node_modules.
    - debian/control: Add node-get-intrinsic, node-isarray, and
      node-is-typed-array to Depends.
    - debian/copyright: Add copyright details for embedded Node modules.
    - debian/install: Install embedded Node modules.
    - CVE-2025-9288

 -- Edwin Jiang <email address hidden> Tue, 23 Sep 2025 14:50:20 +0000
CVE-2025-9288 Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.


About   -   Send Feedback to @ubuntu_updates