UbuntuUpdates.org

Package "node-browserify-sign"

Name: node-browserify-sign

Description:

adds node crypto signing for browsers
Latest version: 4.2.1-3ubuntu0.1
Release: mantic (23.10)
Level: security
Repository: universe
Homepage: https://github.com/crypto-browserify/browserify-sign

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "node-browserify-sign"

All arch deb package
APT INSTALL

Other versions of "node-browserify-sign" in Mantic

Repository Area Version
base universe 4.2.1-3
updates universe 4.2.1-3ubuntu0.1

Changelog

Version: 4.2.1-3ubuntu0.1 2024-05-30 13:07:08 UTC

  node-browserify-sign (4.2.1-3ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Signature Forgery Attack
    - debian/patches/CVE-2023-46234.patch: fixed an upper bound check issue in
      `dsaVerify` function
    - CVE-2023-46234

 -- Amir Naseredini <email address hidden> Tue, 28 May 2024 12:26:03 +0100
CVE-2023-46234 browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on i


About   -   Send Feedback to @ubuntu_updates