stable

nodejs20-20.12.2-1.fc39

FEDORA-2024-e28ccc9c17 created by sgallagh 2 years ago for Fedora 39

2024-04-03, Version 20.12.1 'Iron' (LTS), @RafaelGSS

This is a security release

Notable Changes

  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4

Commits


2024-04-03, Version 20.12.1 'Iron' (LTS), @RafaelGSS

This is a security release

Notable Changes

  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-e28ccc9c17

This update has been submitted for testing by sgallagh.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update has obsoleted nodejs20-20.12.1-3.fc39, and has inherited its bugs and notes.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-1
Stable by Karma
2
Stable by Time
7 days
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
approved
2 years ago
BZ#2272764 CVE-2024-27983 nodejs: CONTINUATION frames DoS
0
0
BZ#2273045 CVE-2024-27983 nodejs20: nodejs: CONTINUATION frames DoS [fedora-all]
0
0
BZ#2273542 NodeJS runs an illegal instruction on pre-x86_64-v3 hardware
0
0
BZ#2274380 nodejs20-20.12.2 is available
0
0

Automated Test Results