| Release | Version |
|---|---|
| buster | 6.4.1~dfsg-1+deb10u1 |
| bullseye | 6.5.4~dfsg-1 |
| bookworm | 6.5.4~dfsg-2 |
| trixie | 6.5.4~dfsg-2 |
| sid | 6.5.4~dfsg-2 |
| Bug | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2020-28498 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | The package elliptic before 6.5.4 are vulnerable to Cryptographic Issu ... |
| Bug | Description |
|---|---|
| CVE-2020-13822 | The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleabi ... |