Ubuntu
node-moment package

node-moment 2.20.1+ds-1ubuntu0.1 source package in Ubuntu

Changelog

node-moment (2.20.1+ds-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Path traversal (LP: #1982617)
    - debian/patches/CVE-2022-24785.patch: Avoid loading path-looking locales
      from filesystem.
    - CVE-2022-24785
  * SECURITY UPDATE: Denial of service via very long date string (LP: #1982617)
    - debian/patches/CVE-2022-31129.patch: Make a regular expression more
      efficient.
    - CVE-2022-31129
  * debian/control: Add a build dependency on libjs-qunit.
  * debian/rules: Add an override_dh_auto_test target that invokes
    debian/run_test_suite.
  * debian/run_test_suite: New file that invokes the upstream test suite.

 -- Luís Infante da Câmara <email address hidden>  Fri, 22 Jul 2022 22:08:31 +0100

Upload details

Uploaded by:
Luís Infante da Câmara
Sponsored by:
Nishit Majithia
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
javascript
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe misc
Bionic security universe misc

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
node-moment_2.20.1+ds.orig.tar.gz 805.4 KiB 5f0664ecba6b43254c19c44a1a766f6a143b2247ec23156cc6183bcca61eeed6
node-moment_2.20.1+ds-1ubuntu0.1.debian.tar.xz 4.5 KiB dbc9a259780b6bb01ad75b5e230c5a0323705aee62bc8916de3f0e61fb0133ef
node-moment_2.20.1+ds-1ubuntu0.1.dsc 2.1 KiB f5e04e6d84e068c48bdae3bce11a30358a22ccafd1b8dff14f702b7dffba5ef4

View changes file

Binary packages built by this source

libjs-moment: Work with dates in JavaScript (library)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 This package contains the JavaScript library.

node-moment: Work with dates in JavaScript (Node.js module)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 Node.js is an event-based server-side JavaScript engine.