Security update postcss (CVE-2023-44270)

$ yarn audit yarn audit v1.22.19 ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ moderate │ PostCSS line return parsing error │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=8.4.31 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://www.npmjs.com/advisories/1094239 │ └───────────────┴──────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ moderate │ PostCSS line return parsing error │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=8.4.31 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ stylelint │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ stylelint > postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://www.npmjs.com/advisories/1094239 │ └───────────────┴──────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ moderate │ PostCSS line return parsing error │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=8.4.31 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ stylelint-order │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ stylelint-order > postcss │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://www.npmjs.com/advisories/1094239 │ └───────────────┴──────────────────────────────────────────────────────────────┘ 3 vulnerabilities found - Packages audited: 822 Severity: 3 Moderate Done in 4.13s.

Comments & Activities

Issue created by @Spokje
Comment 11 months ago →
🇳🇱Netherlands Spokje
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,382 pass
Comment 11 months ago →
🇳🇱Netherlands Spokje
Comment 11 months ago →
🇳🇱Netherlands Spokje
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
CI aborted
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
29,651 pass, 2 fail
Status changed to Needs review 11 months ago3:22pm 8 October 2023
Comment 11 months ago →
🇳🇱Netherlands Spokje
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
CI aborted
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
29,653 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,384 pass
Status changed to RTBC 11 months ago7:42pm 9 October 2023
Comment 11 months ago →
🇺🇸United States smustgrave
Reran the 11.x tests and they had no failure.
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,392 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,397 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,397 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,413 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update 11 months ago
30,417 pass
Comment 11 months ago →
🇬🇧United Kingdom longwave UK
Committed and pushed 772ba90504 to 11.x and e4e192f7ba to 10.2.x and 35da18cb5b to 10.1.x. Thanks!
Comment 11 months ago →
System Message

longwave → committed 35da18cb on 10.1.x
Issue #3392485 by Spokje: Security update postcss (CVE-2023-44270) (...
Comment 11 months ago →
System Message

longwave → committed e4e192f7 on 10.2.x
Issue #3392485 by Spokje: Security update postcss (CVE-2023-44270) (...
Status changed to Fixed 11 months ago8:04am 19 October 2023
Comment 11 months ago →
System Message

longwave → committed 772ba905 on 11.x
Issue #3392485 by Spokje: Security update postcss (CVE-2023-44270)
Comment 10 months ago →
System Message
Automatically closed - issue fixed for 2 weeks with no activity.

Security update postcss (CVE-2023-44270)

Problem/Motivation

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

Comments & Activities