UbuntuUpdates.org

Package "nodejs-dev"

Name: nodejs-dev

Description:

evented I/O for V8 javascript (development files)
Latest version: 8.10.0~dfsg-2ubuntu0.2
Release: bionic (18.04)
Level: security
Repository: universe
Head package: nodejs
Homepage: http://nodejs.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "nodejs-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "nodejs-dev" in Bionic

Repository Area Version
base universe 8.10.0~dfsg-2
updates universe 8.10.0~dfsg-2ubuntu0.4

Changelog

Version: 8.10.0~dfsg-2ubuntu0.2 2018-08-14 13:06:33 UTC

  nodejs (8.10.0~dfsg-2ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: HTTP/2 DoS vulnerability
    - debian/patches/CVE-2018-7161.patch: An attacker can cause a denial of
       service (DoS) by causing a node server providing an http2 server to
       crash by triggering a cleanup bug (use after free).
    - CVE-2018-7161
  * Fix test failures due to expired certificates
    - debian/patches/regen-test-certs.patch: test: update certificates and
      private keys.

 -- Mike Salvatore <email address hidden> Thu, 09 Aug 2018 14:20:02 -0400
CVE-2018-7161 All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node


About   -   Send Feedback to @ubuntu_updates