shield Security update for nodejs12

SUSE-SLE-Module-Web-Scripting-12-2020-59

This update for nodejs12 fixes the following issues: Update to LTS release 12.13.0 (jsc#SLE-8947). Security issues fixed: - CVE-2019-9511: Fixed the HTTP/2 implementation that was vulnerable to window size manipulations (bsc#1146091). - CVE-2019-9512: Fixed the HTTP/2 implementation that was vulnerable to floods using PING frames (bsc#1146099). - CVE-2019-9513: Fixed the HTTP/2 implementation that was vulnerable to resource loops, potentially leading to a denial of service (bsc#1146094). - CVE-2019-9514: Fixed the HTTP/2 implementation that was vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146095). - CVE-2019-9515: Fixed the HTTP/2 implementation that was vulnerable to a SETTINGS frame flood (bsc#1146100). - CVE-2019-9516: Fixed the HTTP/2 implementation that was vulnerable to a header leak, potentially leading to a denial of service (bsc#1146090). - CVE-2019-9517: Fixed the HTTP/2 implementation that was vulnerable to unconstrained interal data buffering (bsc#1146097). - CVE-2019-9518: Fixed the HTTP/2 implementation that was vulnerable to a flood of empty frames, potentially leading to a denial of service (bsc#1146093). - CVE-2019-13173: Fixed a file overwrite in the fstream.DirWriter() function (bsc#1140290).

• Release Date
  Jan 9 2020
• References
  Bugzilla: SLE-8947, 1146093, 1146095, 1146100, 1146099, 1140290, 1146097, 1146090, 1149792, 1146094, 1146091
  CVEs: CVE-2019-9516, CVE-2019-9511, CVE-2019-13173, CVE-2019-9517, CVE-2019-9513, CVE-2019-9515, CVE-2019-9518, CVE-2019-9512, CVE-2019-9514
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.13.0-1.3.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.13.0-1.3.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.13.0-1.3.1 lock rpm

  npm12
  Package manager for Node.js

  12.13.0-1.3.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.13.0-1.3.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.13.0-1.3.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.13.0-1.3.1 lock rpm

  npm12
  Package manager for Node.js

  12.13.0-1.3.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.13.0-1.3.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.13.0-1.3.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.13.0-1.3.1 lock rpm

  npm12
  Package manager for Node.js

  12.13.0-1.3.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.13.0-1.3.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.13.0-1.3.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.13.0-1.3.1 lock rpm

  npm12
  Package manager for Node.js

  12.13.0-1.3.1 lock rpm