[Git][security-tracker-team/security-tracker][master] 2 commits: Update information for CVE-2019-5739/nodejs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8087dc0b by Salvatore Bonaccorso at 2019-02-28T22:37:36Z
Update information for CVE-2019-5739/nodejs

nodejs >= 8.0.0 upstream were not affected by CVE-2019-5739 as 8.0.0
introduced a dedicated server.keepAliveTimeout which defaults to 5
seconds.

Cf.
https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/

Mark accordingly the first version of nodejs which entered unstable as
the fixed version for CVE-2019-5739.

- - - - -
a76326d0 by Salvatore Bonaccorso at 2019-02-28T22:38:57Z
Update information for CVE-2019-5737/nodejs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8830,14 +8830,14 @@ CVE-2019-5740
 	RESERVED
 CVE-2019-5739 [Node.js: Denial of Service with keep-alive HTTP connections]
 	RESERVED
-	- nodejs <unfixed> (unimportant)
+	- nodejs 8.9.3~dfsg-5 (unimportant)
 	NOTE: https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
 	NOTE: Nodejs not covered by security support
 CVE-2019-5738
 	RESERVED
 CVE-2019-5737 [Node.js: Slowloris HTTP Denial of Service with keep-alive]
 	RESERVED
-	- nodejs <unfixed> (unimportant)
+	- nodejs 10.15.2~dfsg-1 (unimportant)
 	NOTE: https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
 	NOTE: Nodejs not covered by security support
 CVE-2018-20680 (Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2e8326355030440b968918c214b72565f4ff3cc2...a76326d0aedb860c87a5d80870391be22597f8df

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2e8326355030440b968918c214b72565f4ff3cc2...a76326d0aedb860c87a5d80870391be22597f8df
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190228/6d2341fe/attachment.html>