Ubuntu
node-moment package

node-moment 2.29.1+ds-3ubuntu0.2 source package in Ubuntu

Changelog

node-moment (2.29.1+ds-3ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Path traversal (LP: #1982617)
    - debian/patches/CVE-2022-24785.patch: Avoid loading path-looking locales
      from filesystem.
    - CVE-2022-24785
  * SECURITY UPDATE: Denial of service via very long date string (LP: #1982617)
    - debian/patches/CVE-2022-31129.patch: Make a regular expression more
      efficient.
    - CVE-2022-31129
  * debian/changelog: Add build dependency on libjs-qunit.
  * debian/source/lintian-overrides: Remove, because all overrides are unused
    or mismatched.
  * debian/tests/control: Add dependency on libjs-qunit.
  * debian/tests/pkg-js/test: Do a complete test.

 -- Luís Infante da Câmara <email address hidden>  Thu, 04 Aug 2022 09:27:56 +0100

Upload details

Uploaded by:
Luís Infante da Câmara
Sponsored by:
Nishit Majithia
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
javascript
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates universe misc
Jammy security universe misc

Builds

Jammy: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
node-moment_2.29.1+ds.orig.tar.xz 543.0 KiB e86a629aa52a8baf37459293d6c1ea1477171022ed935dc8d64052ac67280ea5
node-moment_2.29.1+ds-3ubuntu0.2.debian.tar.xz 5.2 KiB ad4e69af7984c42a2ce4ddc418ddba7eb5138316f34043b605b0d52796a820fb
node-moment_2.29.1+ds-3ubuntu0.2.dsc 2.1 KiB 030f10027db455d80c554d3eff911b389a55015bc3aade5783645680427bb04f

View changes file

Binary packages built by this source

libjs-moment: Work with dates in JavaScript (library)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 This package contains the JavaScript library.

node-moment: Work with dates in JavaScript (Node.js module)

 A lightweight JavaScript date library to parse, validate,
 manipulate and format dates.
 .
 Node.js is an event-based server-side JavaScript engine.