|
 |
9500a8 |
From e040864f2797b9c705bac5862581d5f190510e04 Mon Sep 17 00:00:00 2001
|
|
|
9500a8 |
From: rpm-build <rpm-build>
|
|
|
9500a8 |
Date: Thu, 9 Dec 2021 15:48:46 +0100
|
|
|
9500a8 |
Subject: [PATCH] deps(ansi-regex): fix potential ReDoS
|
|
|
9500a8 |
|
|
|
9500a8 |
This is the upstream fix [1] applied to all applicable bundled deps.
|
|
|
9500a8 |
|
|
|
9500a8 |
[1]: https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
|
|
|
9500a8 |
|
|
|
9500a8 |
Fixes: CVE-2021-3807
|
|
|
9500a8 |
Signed-off-by: rpm-build <rpm-build>
|
|
|
9500a8 |
---
|
|
|
9500a8 |
deps/npm/node_modules/cliui/node_modules/ansi-regex/index.js | 2 +-
|
|
|
9500a8 |
.../node_modules/string-width/node_modules/ansi-regex/index.js | 2 +-
|
|
|
9500a8 |
.../npm/node_modules/wrap-ansi/node_modules/ansi-regex/index.js | 2 +-
|
|
|
9500a8 |
deps/npm/node_modules/yargs/node_modules/ansi-regex/index.js | 2 +-
|
|
|
9500a8 |
4 files changed, 4 insertions(+), 4 deletions(-)
|
|
|
9500a8 |
|
|
|
9500a8 |
diff --git a/deps/npm/node_modules/cliui/node_modules/ansi-regex/index.js b/deps/npm/node_modules/cliui/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
index c254480..9e37ec3 100644
|
|
|
9500a8 |
--- a/deps/npm/node_modules/cliui/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
+++ b/deps/npm/node_modules/cliui/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
@@ -6,7 +6,7 @@ module.exports = options => {
|
|
|
9500a8 |
}, options);
|
|
|
9500a8 |
|
|
|
9500a8 |
const pattern = [
|
|
|
9500a8 |
- '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
+ '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
|
|
|
9500a8 |
].join('|');
|
|
|
9500a8 |
|
|
|
9500a8 |
diff --git a/deps/npm/node_modules/string-width/node_modules/ansi-regex/index.js b/deps/npm/node_modules/string-width/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
index c4aaecf..7d32201 100644
|
|
|
9500a8 |
--- a/deps/npm/node_modules/string-width/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
+++ b/deps/npm/node_modules/string-width/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
@@ -2,7 +2,7 @@
|
|
|
9500a8 |
|
|
|
9500a8 |
module.exports = () => {
|
|
|
9500a8 |
const pattern = [
|
|
|
9500a8 |
- '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[a-zA-Z\\d]*)*)?\\u0007)',
|
|
|
9500a8 |
+ '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PRZcf-ntqry=><~]))'
|
|
|
9500a8 |
].join('|');
|
|
|
9500a8 |
|
|
|
9500a8 |
diff --git a/deps/npm/node_modules/wrap-ansi/node_modules/ansi-regex/index.js b/deps/npm/node_modules/wrap-ansi/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
index c254480..9e37ec3 100644
|
|
|
9500a8 |
--- a/deps/npm/node_modules/wrap-ansi/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
+++ b/deps/npm/node_modules/wrap-ansi/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
@@ -6,7 +6,7 @@ module.exports = options => {
|
|
|
9500a8 |
}, options);
|
|
|
9500a8 |
|
|
|
9500a8 |
const pattern = [
|
|
|
9500a8 |
- '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
+ '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
|
|
|
9500a8 |
].join('|');
|
|
|
9500a8 |
|
|
|
9500a8 |
diff --git a/deps/npm/node_modules/yargs/node_modules/ansi-regex/index.js b/deps/npm/node_modules/yargs/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
index c254480..9e37ec3 100644
|
|
|
9500a8 |
--- a/deps/npm/node_modules/yargs/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
+++ b/deps/npm/node_modules/yargs/node_modules/ansi-regex/index.js
|
|
|
9500a8 |
@@ -6,7 +6,7 @@ module.exports = options => {
|
|
|
9500a8 |
}, options);
|
|
|
9500a8 |
|
|
|
9500a8 |
const pattern = [
|
|
|
9500a8 |
- '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
+ '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
|
|
|
9500a8 |
'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
|
|
|
9500a8 |
].join('|');
|
|
|
9500a8 |
|
|
|
9500a8 |
--
|
|
|
9500a8 |
2.33.1
|
|
|
9500a8 |
|