Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Commit aed32c2

Browse files
authored
Merge pull request #4085 from cdr/jsjoeio-fix-tar-vul
fix(security): tar vulnerability
2 parents 5c47c3e + a24e8f5 commit aed32c2

File tree

6 files changed

+16
-15
lines changed

6 files changed

+16
-15
lines changed

‎lib/vscode/package.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -218,6 +218,7 @@
218218
"elliptic": "^6.5.3",
219219
"nwmatcher": "^1.4.4",
220220
"chrome-remote-interface": "^0.30.0",
221-
"glob-parent": "^5.1.2"
221+
"glob-parent": "^5.1.2",
222+
"tar": "^6.1.9"
222223
}
223224
}

‎lib/vscode/yarn.lock‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8020,10 +8020,10 @@ tapable@^1.0.0, tapable@^1.1.3:
80208020
resolved "https://registry.yarnpkg.com/tapable/-/tapable-1.1.3.tgz#a1fccc06b58db61fd7a45da2da44f5f3a3e67ba2"
80218021
integrity sha512-4WK/bYZmj8xLr+HUCODHGF1ZFzsYffasLUgEiMBY4fgtltdO6B4WJtlSbPaDTLpYTcGVwM2qLnFTICEcNxs3kA==
80228022

8023-
tar@^6.0.2:
8024-
version "6.0.5"
8025-
resolved "https://registry.yarnpkg.com/tar/-/tar-6.0.5.tgz#bde815086e10b39f1dcd298e89d596e1535e200f"
8026-
integrity sha512-0b4HOimQHj9nXNEAA7zWwMM91Zhhba3pspja6sQbgTpynOJf+bkjBnfybNYzbpLbnwXnbyB4LOREvlyXLkCHSg==
8023+
tar@^6.0.2, tar@^6.1.9:
8024+
version "6.1.11"
8025+
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.11.tgz#6760a38f003afa1b2ffd0ffe9e9abbd0eab3d621"
8026+
integrity sha512-an/KZQzQUkZCkuoAA64hM92X0Urb6VpRhAFllDzz44U2mcD5scmT3zBc4VgVpkugF580+DQn8eAFSyoQt0tznA==
80278027
dependencies:
80288028
chownr "^2.0.0"
80298029
fs-minipass "^2.0.0"

‎package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@
8080
"browserslist": "^4.16.5",
8181
"safe-buffer": "^5.1.1",
8282
"vfile-message": "^2.0.2",
83-
"argon2/@mapbox/node-pre-gyp/tar": "^6.1.3",
83+
"argon2/@mapbox/node-pre-gyp/tar": "^6.1.9",
8484
"path-parse": "^1.0.7"
8585
},
8686
"dependencies": {

‎test/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,6 @@
1919
"wtfnode": "^0.9.0"
2020
},
2121
"resolutions": {
22-
"argon2/@mapbox/node-pre-gyp/tar": "^6.1.3"
22+
"argon2/@mapbox/node-pre-gyp/tar": "^6.1.9"
2323
}
2424
}

‎test/yarn.lock‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4412,10 +4412,10 @@ symbol-tree@^3.2.4:
44124412
resolved "https://registry.yarnpkg.com/symbol-tree/-/symbol-tree-3.2.4.tgz#430637d248ba77e078883951fb9aa0eed7c63fa2"
44134413
integrity sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==
44144414

4415-
tar@^6.1.0, tar@^6.1.3:
4416-
version "6.1.6"
4417-
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.6.tgz#c23d797b0a1efe5d479b1490805c5443f3560c5d"
4418-
integrity sha512-oaWyu5dQbHaYcyZCTfyPpC+VmI62/OM2RTUYavTk1MDr1cwW5Boi3baeYQKiZbY2uSQJGr+iMOzb/JFxLrft+g==
4415+
tar@^6.1.0, tar@^6.1.9:
4416+
version "6.1.11"
4417+
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.11.tgz#6760a38f003afa1b2ffd0ffe9e9abbd0eab3d621"
4418+
integrity sha512-an/KZQzQUkZCkuoAA64hM92X0Urb6VpRhAFllDzz44U2mcD5scmT3zBc4VgVpkugF580+DQn8eAFSyoQt0tznA==
44194419
dependencies:
44204420
chownr "^2.0.0"
44214421
fs-minipass "^2.0.0"

‎yarn.lock‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4882,10 +4882,10 @@ tar-stream@^2.1.4:
48824882
inherits "^2.0.3"
48834883
readable-stream "^3.1.1"
48844884

4885-
tar@^6.1.0, tar@^6.1.3:
4886-
version "6.1.6"
4887-
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.6.tgz#c23d797b0a1efe5d479b1490805c5443f3560c5d"
4888-
integrity sha512-oaWyu5dQbHaYcyZCTfyPpC+VmI62/OM2RTUYavTk1MDr1cwW5Boi3baeYQKiZbY2uSQJGr+iMOzb/JFxLrft+g==
4885+
tar@^6.1.0, tar@^6.1.9:
4886+
version "6.1.11"
4887+
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.11.tgz#6760a38f003afa1b2ffd0ffe9e9abbd0eab3d621"
4888+
integrity sha512-an/KZQzQUkZCkuoAA64hM92X0Urb6VpRhAFllDzz44U2mcD5scmT3zBc4VgVpkugF580+DQn8eAFSyoQt0tznA==
48894889
dependencies:
48904890
chownr "^2.0.0"
48914891
fs-minipass "^2.0.0"

0 commit comments

Comments
(0)

AltStyle によって変換されたページ (->オリジナル) /