Overview
Request 593710 superseded
- Fix some node-gyp permissions
- New upstream LTS release 8.11.1:
* Security fixes:
+ Fix for inspector DNS rebinding vulnerability
(bsc#1087463, CVE-2018-7160)
+ Fix for 'path' module regular expression denial of service
(bsc#1087459, CVE-2018-7158)
+ Reject spaces in HTTP Content-Length header values
(bsc#1087453, CVE-2018-7159)
* deps: upgrade http-parser to v2.8.0
- Created by adamm
- In state superseded
- Superseded by 593717
- Open review for factory-staging
- Open review for opensuse-review-team
- Open review for repo-checker
Request History
adamm created request
- Fix some node-gyp permissions
- New upstream LTS release 8.11.1:
* Security fixes:
+ Fix for inspector DNS rebinding vulnerability
(bsc#1087463, CVE-2018-7160)
+ Fix for 'path' module regular expression denial of service
(bsc#1087459, CVE-2018-7158)
+ Reject spaces in HTTP Content-Length header values
(bsc#1087453, CVE-2018-7159)
* deps: upgrade http-parser to v2.8.0
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto added repo-checker as a reviewer
Please review build success
factory-auto accepted review
Check script succeeded
licensedigger accepted review
ok
superseded by 593717