Ubuntu
node-moment package

node-moment 2.24.0+ds-2ubuntu0.1 source package in Ubuntu

Changelog

node-moment (2.24.0+ds-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Path traversal (LP: #1982617)
    - debian/patches/CVE-2022-24785.patch: Avoid loading path-looking locales
      from filesystem.
    - CVE-2022-24785
  * SECURITY UPDATE: Denial of service via very long date string (LP: #1982617)
    - debian/patches/CVE-2022-31129.patch: Make a regular expression more
      efficient.
    - CVE-2022-31129
  * debian/control: Add build dependency on libjs-qunit.
  * debian/tests/pkg-js/test: New file that invokes the upstream test suite.
    This addresses the Lintian warnings.

 -- Luís Infante da Câmara <email address hidden>  Thu, 04 Aug 2022 07:50:50 +0100

Upload details

Uploaded by:
Luís Infante da Câmara
Sponsored by:
Nishit Majithia
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
javascript
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe misc
Focal security universe misc

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
node-moment_2.24.0+ds.orig.tar.xz 415.5 KiB ad64329e3a5d43ade784d7dec3667f36e3e9b4b365644ca75cf5dddaa1f29ffa
node-moment_2.24.0+ds-2ubuntu0.1.debian.tar.xz 5.0 KiB a070d3b2f03875c9e18a2d644b74e04952ea164d279d63be7a20fba3fff7c9d6
node-moment_2.24.0+ds-2ubuntu0.1.dsc 2.1 KiB 74d1a6ebc53001c6580645abc1ae651117ae872e61cf9f17bf9118a859298a7c

View changes file

Binary packages built by this source

libjs-moment: Work with dates in JavaScript (library)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 This package contains the JavaScript library.

node-moment: Work with dates in JavaScript (Node.js module)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 Node.js is an event-based server-side JavaScript engine.