1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2021-d5b2c18fe6

[FEDORA-2021-d5b2c18fe6] Fedora 32: nodejs

Severity High
Affected Packages 1
CVEs 3
Info Packages References Vulnerabilities

Update to 12.20.1 security release

Package Affected Version
pkg:rpm/fedora/nodejs?distro=fedora-32 < 12.20.1.1.fc32
ID
FEDORA-2021-d5b2c18fe6
Severity
high
Severity from
CVE-2020-8265
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d5b2c18fe6
Published
2021-01-16T01:23:44
(3 years ago)
Modified
2021-01-16T01:23:44
(3 years ago)
Rights
Copyright 2021 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 1912865 Bug #1912865 - CVE-2020-8287 nodejs: HTTP Request Smuggling via two copies of a header field in a http request [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1912865
Bugzilla 1741980 Bug #1741980 - CVE-2019-9516 nodejs: HTTP/2: 0-length headers lead to denial of service [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1741980
Bugzilla 1912866 Bug #1912866 - CVE-2020-8287 nodejs:12/nodejs: HTTP Request Smuggling via two copies of a header field in a http request [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1912866
Bugzilla 1912859 Bug #1912859 - CVE-2020-8265 nodejs:12/nodejs: use-after-free in its TLS implementation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1912859
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/nodejs?distro=fedora-32 fedora nodejs < 12.20.1.1.fc32 fedora-32
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date