-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-8b8dc96235 2018-06-04 13:04:50.760169 --------------------------------------------------------------------------------
Name : nodejs-deep-extend Product : Fedora EPEL 7 Version : 0.5.1 Release : 1.el7 URL : https://github.com/unclechu/node-deep-extend Summary : Recursive object extending Description : Recursive object extending.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2018-3750 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1578246 - CVE-2018-3750 nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties https://bugzilla.redhat.com/show_bug.cgi?id=1578246 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update nodejs-deep-extend' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org