-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Feb 2021 14:48:02 +0100 Source: nodejs Architecture: source Version: 10.24.0~dfsg-1~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Jérémy Lal <kapouer@melix.org> Changes: nodejs (10.24.0~dfsg-1~deb10u1) buster-security; urgency=medium . * New upstream version 10.24.0~dfsg Fixed vulnerabilities: + CVE-2021-22883: HTTP2 'unknownProtocol' cause DoS by resource exhaustion + CVE-2021-22884: localhost6 DNS rebinding in --inspect Checksums-Sha1: 55cea7cc954919452605de84019baa120954b562 3057 nodejs_10.24.0~dfsg-1~deb10u1.dsc 7513803a10bb77138e5aca74316288c90d06089d 16560736 nodejs_10.24.0~dfsg.orig.tar.xz 50d33af17772c9fb7cad735a27f44868c509f435 100180 nodejs_10.24.0~dfsg-1~deb10u1.debian.tar.xz ba51a7215398252b5f547ad86185717d9dbf3a12 7203 nodejs_10.24.0~dfsg-1~deb10u1_source.buildinfo Checksums-Sha256: 801af0ca7d0d711b3b96e1d357e1dad302ae36dde117e0d654429dcdbb6ba0f3 3057 nodejs_10.24.0~dfsg-1~deb10u1.dsc 3defd424939f3f9c64775760de3db650f24407fc8b62fd16d103567441d31eab 16560736 nodejs_10.24.0~dfsg.orig.tar.xz 7715a8f82b940510291c856f964ff89b9aa806aec638977a0318852ccbc4e514 100180 nodejs_10.24.0~dfsg-1~deb10u1.debian.tar.xz 969cd6f07287d22a89f47517fd33131d19d80a7e21628faf2c4e96a2d85a32e8 7203 nodejs_10.24.0~dfsg-1~deb10u1_source.buildinfo Files: bf49ee52a05a35be75eb06d829f50068 3057 javascript optional nodejs_10.24.0~dfsg-1~deb10u1.dsc fd5a7676d38081f9dd42450219959302 16560736 javascript optional nodejs_10.24.0~dfsg.orig.tar.xz d974906553251f03af6e04a84bf46c4d 100180 javascript optional nodejs_10.24.0~dfsg-1~deb10u1.debian.tar.xz 6cff7a603a3e34a78623435ffa61aaec 7203 javascript optional nodejs_10.24.0~dfsg-1~deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEA8Tnq7iA9SQwbkgVZhHAXt0583QFAmA1gT4SHGthcG91ZXJA bWVsaXgub3JnAAoJEGYRwF7dOfN0/tgP/26xqK4AxAc9+PPQ3SVKRROlmeEmKTiW GIf3CekiW9m4IvOCLSseqEf198E5ZLOoWftKJxW8s9JJVcolHHNbdDEZVoms4tzJ 5SH+JEOhVNLQrvkar/sxzg30A2uIBtaBQV+D9GK40DH8N2V1JcQWlVyjJxLrktQf 72rVwlo3Vqcu9ZwkjLm00O0Plkkaq2IIgcRmP6Cjq8N0007w60EwOde1Nloyvn61 zqrvPebHzIPr0gGUwD3NsLUTOKnI/XSkcdrFtC8bg3tjbcONTopQdnur8pQE66/k itwMYK2Jsc2AZV4z5DpyFwue+DVn4ia9Bipz6IVSUt/Rox/gR2s7aObGGA22lA06 3EC4ietObnlDi/BlL+v+/cy/m58+eZ7m6YcN54uBc0HGq7xAenmfDFbzxYYqD9wn U8xDP6Gmg6ruHBid4etPKY+m+4abUSszmGMnPfDLGn2jAV1lu5WL8Fjy3YB3aRsx Pzf/StP2A3uK9wJD9iZGJfJ4Jy6U8foy1Nl8CJLgl7DvejNwDmk6O3SCFuuBasLX NuE4w+2cRTR8FvQh09zhih8i36jarooGE1U0s8Ihh5vBy9V0rDim6FWAjMRFMaNP lzUGAdvnsJ4AAaaug0yw3o8y5Hr4JF3hyt7Ef0y8MLv+k5K99VqRj+OQ6ibk2A58 u77cXsarFa7a =ADSD -----END PGP SIGNATURE-----