Security update for nodejs8
This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1117626
- https://bugzilla.suse.com/1117627
- https://bugzilla.suse.com/1117629
- https://bugzilla.suse.com/1117630
- https://www.suse.com/security/cve/CVE-2018-12116
- https://www.suse.com/security/cve/CVE-2018-12121
- https://www.suse.com/security/cve/CVE-2018-12122
- https://www.suse.com/security/cve/CVE-2018-12123
- https://www.suse.com/support/update/announcement/2019/suse-su-20190118-1/