Blame SOURCES/0005-dep-ansi-regex-fix-potential-ReDoS.patch

3de537
From 03704852379d943e3252f6bfa5978d5485b8b10b Mon Sep 17 00:00:00 2001
3de537
From: rpm-build <rpm-build>
3de537
Date: Mon, 13 Dec 2021 12:18:27 +0100
3de537
Subject: [PATCH] dep(ansi-regex): fix potential ReDoS
3de537
3de537
This is application of upstream patch [1] to all bundled deps.
3de537
3de537
[1]: https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
3de537
3de537
Fixes: CVE-2021-3807
3de537
Signed-off-by: rpm-build <rpm-build>
3de537
---
3de537
 node_modules/ansi-align/node_modules/ansi-regex/index.js  | 2 +-
3de537
 node_modules/boxen/node_modules/ansi-regex/index.js       | 2 +-
3de537
 node_modules/widest-line/node_modules/ansi-regex/index.js | 2 +-
3de537
 3 files changed, 3 insertions(+), 3 deletions(-)
3de537
3de537
diff --git a/node_modules/ansi-align/node_modules/ansi-regex/index.js b/node_modules/ansi-align/node_modules/ansi-regex/index.js
3de537
index c254480..f4d035c 100644
3de537
--- a/node_modules/ansi-align/node_modules/ansi-regex/index.js
3de537
+++ b/node_modules/ansi-align/node_modules/ansi-regex/index.js
3de537
@@ -6,7 +6,7 @@ module.exports = options => {
3de537
 	}, options);
3de537
 
3de537
 	const pattern = [
3de537
-		'[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
+	    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
 		'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
3de537
 	].join('|');
3de537
 
3de537
diff --git a/node_modules/boxen/node_modules/ansi-regex/index.js b/node_modules/boxen/node_modules/ansi-regex/index.js
3de537
index 35054aa..624d38b 100644
3de537
--- a/node_modules/boxen/node_modules/ansi-regex/index.js
3de537
+++ b/node_modules/boxen/node_modules/ansi-regex/index.js
3de537
@@ -2,7 +2,7 @@
3de537
 
3de537
 module.exports = ({onlyFirst = false} = {}) => {
3de537
 	const pattern = [
3de537
-		'[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
+	    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
 		'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
3de537
 	].join('|');
3de537
 
3de537
diff --git a/node_modules/widest-line/node_modules/ansi-regex/index.js b/node_modules/widest-line/node_modules/ansi-regex/index.js
3de537
index 35054aa..624d38b 100644
3de537
--- a/node_modules/widest-line/node_modules/ansi-regex/index.js
3de537
+++ b/node_modules/widest-line/node_modules/ansi-regex/index.js
3de537
@@ -2,7 +2,7 @@
3de537
 
3de537
 module.exports = ({onlyFirst = false} = {}) => {
3de537
 	const pattern = [
3de537
-		'[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
+	    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
3de537
 		'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
3de537
 	].join('|');
3de537
 
3de537
-- 
3de537
2.33.1
3de537