Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 8087dc0b by Salvatore Bonaccorso at 2019-02-28T22:37:36Z Update information for CVE-2019-5739/nodejs nodejs >= 8.0.0 upstream were not affected by CVE-2019-5739 as 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. Cf. https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/ Mark accordingly the first version of nodejs which entered unstable as the fixed version for CVE-2019-5739. - - - - - a76326d0 by Salvatore Bonaccorso at 2019-02-28T22:38:57Z Update information for CVE-2019-5737/nodejs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -8830,14 +8830,14 @@ CVE-2019-5740 RESERVED CVE-2019-5739 [Node.js: Denial of Service with keep-alive HTTP connections] RESERVED - - nodejs <unfixed> (unimportant) + - nodejs 8.9.3~dfsg-5 (unimportant) NOTE: https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/ NOTE: Nodejs not covered by security support CVE-2019-5738 RESERVED CVE-2019-5737 [Node.js: Slowloris HTTP Denial of Service with keep-alive] RESERVED - - nodejs <unfixed> (unimportant) + - nodejs 10.15.2~dfsg-1 (unimportant) NOTE: https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/ NOTE: Nodejs not covered by security support CVE-2018-20680 (Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field. ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2e8326355030440b968918c214b72565f4ff3cc2...a76326d0aedb860c87a5d80870391be22597f8df -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2e8326355030440b968918c214b72565f4ff3cc2...a76326d0aedb860c87a5d80870391be22597f8df You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
