FEDORA-2019-5a6a7bc12c — security update for nodejs

stable

nodejs-10.16.3-1.fc30

FEDORA-2019-5a6a7bc12c created by sgallagh 5 years ago for Fedora 30

Update to Node.js 10.6.13

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-5a6a7bc12c

This update has been submitted for testing by sgallagh.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

nodejs-10.16.3-1.fc30

BZ#1741962 CVE-2019-9512 nodejs: http/2: HTTP/2 flood using PING frames results in unbounded memory growth [fedora-all]

BZ#1741964 CVE-2019-9514 nodejs: http/2: HTTP/2 flood using HEADERS frames results in unbounded memory growth [fedora-all]

BZ#1741967 CVE-2019-9513 nodejs: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption [fedora-all]

BZ#1741968 CVE-2019-9515 nodejs: http/2: HTTP/2 flood using SETTINGS frames results in unbounded memory growth [fedora-all]

BZ#1741969 CVE-2019-9518 nodejs: HTTP/2: flood using empty frames results in excessive resources consumption [fedora-all]

BZ#1741974 CVE-2019-9517 nodejs: HTTP/2: request for large response leads to denial of service [fedora-all]

BZ#1741979 CVE-2019-9516 nodejs: HTTP/2: 0-length headers leads to denial of service [fedora-all]

nodejs-10.16.3-1.fc30

Automated Test Results

ignored