shield Security update for nodejs8

SUSE-SLE-Module-Web-Scripting-15-2018-1291

This update for nodejs8 to version 8.11.3 fixes the following issues: These security issues were fixed: - CVE-2018-7167: Calling Buffer.fill() or Buffer.alloc() with some parameters could have lead to a hang which could have resulted in a DoS (bsc#1097375). - CVE-2018-7161: By interacting with the http2 server in a manner that triggered a cleanup bug where objects are used in native code after they are no longer available an attacker could have caused a denial of service (DoS) by causing a node server providing an http2 server to crash (bsc#1097404). - CVE-2018-1000168: Fixed a denial of service vulnerability by unbundling nghttp2 (bsc#1097401)

• Release Date
  Jul 9 2018
• References
  Bugzilla: 1097404, 1091764, 1097375, 1097401
  CVEs: CVE-2018-7167, CVE-2018-7161, CVE-2018-1000168
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 15 s390x

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.3-3.5.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.3-3.5.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.3-3.5.1 lock rpm

  npm8
  Package manager for Node.js

  8.11.3-3.5.1 lock rpm

Web and Scripting Module 15 x86_64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.3-3.5.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.3-3.5.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.3-3.5.1 lock rpm

  npm8
  Package manager for Node.js

  8.11.3-3.5.1 lock rpm

Web and Scripting Module 15 ppc64le

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.3-3.5.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.3-3.5.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.3-3.5.1 lock rpm

  npm8
  Package manager for Node.js

  8.11.3-3.5.1 lock rpm

Web and Scripting Module 15 aarch64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.3-3.5.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.3-3.5.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.3-3.5.1 lock rpm

  npm8
  Package manager for Node.js

  8.11.3-3.5.1 lock rpm