Format: 1.8 Date: Wed, 15 Nov 2023 15:29:18 +0000 Source: nodejs Binary: libnode-dev libnode72 nodejs nodejs-doc Built-For-Profiles: noudeb Architecture: amd64 all Version: 12.22.9~dfsg-1ubuntu3.2 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Amir Naseredini Description: libnode-dev - evented I/O for V8 javascript (development files) libnode72 - evented I/O for V8 javascript - runtime library nodejs - evented I/O for V8 javascript - runtime executable nodejs-doc - API documentation for Node.js, the javascript platform Changes: nodejs (12.22.9~dfsg-1ubuntu3.2) jammy-security; urgency=medium . * SECURITY UPDATE: Arbitrary Code Execution - debian/patches/CVE-2022-32212-1.patch: fixed IPv4 validation in inspector_socket - debian/patches/CVE-2022-32212-2.patch: fixed IPv4 non routable validation - debian/patches/CVE-2022-32213-1.patch: add common.mustSucceed for the -2 patch - debian/patches/CVE-2022-32213-2.patch: stricter Transfer-Encoding and header separator parsing. Also fixes CVE-2022-32214 and CVE-2022-32215 - debian/patches/CVE-2022-32213-3.patch: disabled chunked encoding when OBS fold is used. Also fixes CVE-2022-35256. - debian/patches/CVE-2022-43548.patch: harden IP address validation again - CVE-2022-32212 - CVE-2022-32213 - CVE-2022-32214 - CVE-2022-32215 - CVE-2022-35256 - CVE-2022-43548 Checksums-Sha1: b3dbc0e1631c6c0a01d5d13beaa01fc7e0ac0b02 608644 libnode-dev_12.22.9~dfsg-1ubuntu3.2_amd64.deb 24d5ca6ae09430a082e7fbb2a2c88b20eb36ce6b 377532106 libnode72-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 1feac90291747fd9ef8f64ee9d8f5b1c837af202 10792678 libnode72_12.22.9~dfsg-1ubuntu3.2_amd64.deb 12affda1f045240d7a50e087888ba33048ecd969 126942 nodejs-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 0d00fe4888b661dc1fd4656da5fcec116e10828e 2409686 nodejs-doc_12.22.9~dfsg-1ubuntu3.2_all.deb adfe0f87f983c60f97d730216d62ab3bb978ec25 11540 nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.buildinfo 4a75e2c2dc4184c85b3b47f8330e0b9dcf5ce8c9 121760 nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.deb Checksums-Sha256: 21a4f7125700075253265591fd8031b9e8fafdf2da62859fed31f2c3ae2efce2 608644 libnode-dev_12.22.9~dfsg-1ubuntu3.2_amd64.deb 633f70ce2594509c3572969f96ed3798f96cf110aa29333ff05e42d7d253edf6 377532106 libnode72-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 08a5706471c51e9d3f9ec7bbe2f133e4551cbda056511923184f552f0845ceee 10792678 libnode72_12.22.9~dfsg-1ubuntu3.2_amd64.deb 51b267bb7abfe5b3550e09324f3b8f9bbdfe019b3fec332a90722268998c47c6 126942 nodejs-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 472fea3724edef8f301f7a6bea3639d9a51b04569e54ed485f579991ad04aae7 2409686 nodejs-doc_12.22.9~dfsg-1ubuntu3.2_all.deb 0d7aa16173fec115d3057010165f03d5b77337908b989609aa4df8c041c4045f 11540 nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.buildinfo 291c6a2ecdbcc21d7f4ddc3b2718893cea14382218966b53498fb8a9500765e7 121760 nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.deb Files: 6e160123aaed1f26545d7cb43e863335 608644 libdevel optional libnode-dev_12.22.9~dfsg-1ubuntu3.2_amd64.deb 5289d4e8fb2c42f782fe38b9aa4fa76a 377532106 debug optional libnode72-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 1a8fc0de446314c5faad1f46934e5a25 10792678 libs optional libnode72_12.22.9~dfsg-1ubuntu3.2_amd64.deb 22e2ce89fb02731bab1a106c148e5418 126942 debug optional nodejs-dbgsym_12.22.9~dfsg-1ubuntu3.2_amd64.ddeb 453d97ea6327523f54ea44025ef8bcb0 2409686 doc optional nodejs-doc_12.22.9~dfsg-1ubuntu3.2_all.deb d796458904a5586acccb52414b77c399 11540 javascript optional nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.buildinfo e9257c347aa3a3dbc0341c2d8574770f 121760 javascript optional nodejs_12.22.9~dfsg-1ubuntu3.2_amd64.deb Original-Maintainer: Debian Javascript Maintainers