Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

SUSE: 2019:0395-1 Important: Nodejs6 Denial Of Service Fix

suse
Calendar Grey February 14, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for nodejs6 __________________________________________________
An update that fixes 7 vulnerabilities is now available

Summary

This update for nodejs6 to version 6.16.0 fixes the following issues: Security issues fixed: - CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) - CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka "PortSmash") (bsc#1113534) - CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625) - CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626) - CVE-2018-12122: Fixed the "Slowloris" HTTP Denial of Service (bsc#1117627) - CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) - CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory denial of service update critical timing attack SUSE nodejs6

References

#1113534 #1113652 #1117625 #1117626 #1117627

#1117629 #1117630

Cross- CVE-2018-0734 CVE-2018-12116 CVE-2018-12120

CVE-2018-12121 CVE-2018-12122 CVE-2018-12123

CVE-2018-5407

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Module for Web Scripting 12

SUSE Enterprise Storage 4

https://www.suse.com/security/cve/CVE-2018-0734.html

https://www.suse.com/security/cve/CVE-2018-12116.html

https://www.suse.com/security/cve/CVE-2018-12120.html

https://www.suse.com/security/cve/CVE-2018-12121.html

https://www.suse.com/security/cve/CVE-2018-12122.html

https://www.suse.com/security/cve/CVE-2018-12123.html

https://www.suse.com/security/cve/CVE-2018-5407.html

https://bugzilla.suse.com/1113534

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:0395-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service update critical timing attack SUSE nodejs6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here