Skip to main content

Tuleap 16 est là ! Assistez à l'événement virtuel le 17 octobre à 10h30. Inscrivez-vous ici !

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #38625 socket.io: 4.6.1 -> 4.6.2
    Actions
    Infos
    #38625
    Thomas Gerbet (tgerbet)
    2024-06-24 11:22
    2024-06-21 16:32
    40238
    Details
    socket.io: 4.6.1 -> 4.6.2

    Fixes CVE-2024-38355 / https://github.com/socketio/socket.io/security/advisories/GHSA-25hc-qcg6-38wj

    The impact is a DoS of the realtime server.

    "Changes": https://github.com/socketio/socket.io/releases/tag/4.6.2

    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-06-24
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #36800 Tuleap Releases 15.11 Delivered 2024-07-18 09:56 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #38625

    Artifact Tracker v5

    request #38637 ws: 8.x -> 8.17.1

    Git commit

    tuleap/tuleap/stable

    chore: request #38625 socket.io: 4.6.1 -> 4.6.2 183772f3ec
    User avatar Thomas Gerbet (tgerbet) , 2024-06-21 16:50
    Merge commit 'refs/changes/76/31376/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 9e84909f7f
    User avatar Joris MASSON (jmasson) , 2024-06-24 11:17
    Referenced by request #38625

    Artifact Tracker v5

    rel #36800 15.11

    Other

    gerrit #31376
    Display settings

    Follow-ups