OPENSUSE-SU-2019:0089-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 23 Mar 2019, 10:49
Last modified:04 Feb 2026, 03:43

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Mar 2019, 10:49
Published
Vulnerability first disclosed
04 Feb 2026, 03:43
Last Modified
Vulnerability information updated

Description

Security update for nodejs8 This update for nodejs8 to version 8.15.0 fixes the following issues: Security issues fixed: - CVE-2018-12121: Fixed a Denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•nodejs8&distro=openSUSE Leap 15.0

    < 8.15.0-lp150.2.9.1

References (9)