USN-5216-1: hosted-git-info vulnerability
2 September 2022
hosted-git-info could be made to crash if it received specially crafted input.
Releases
Packages
- node-hosted-git-info - Provides metadata from Github, Bitbucket and Gitlab
Details
It was discovered that hosted-git-info incorrectly handled certain inputs. A
remote attacker could use this to cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
-
node-hosted-git-info
-
2.8.5-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 18.04
-
node-hosted-git-info
-
2.5.0-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.