Security update for nodejs8
This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) This update was imported from the SUSE:SLE-15:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) This update was imported from the SUSE:SLE-15:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1117626
- https://bugzilla.suse.com/1117627
- https://bugzilla.suse.com/1117629
- https://bugzilla.suse.com/1117630
- https://lists.opensuse.org/archives/list/[email protected]/thread/WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L/#WVHUGID7T2P6NHDOVMAVMRSCBS4GN25L
- https://www.suse.com/security/cve/CVE-2018-12116
- https://www.suse.com/security/cve/CVE-2018-12121
- https://www.suse.com/security/cve/CVE-2018-12122
- https://www.suse.com/security/cve/CVE-2018-12123