Summary
[2.7.1-8.2]
- Do not break ABI with CVE-2019-15605 fix
[2.7.1-8.1]
- Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
smuggling using malformed Transfer-Encoding header
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | http-parser | 0:2.7.1-8.el7_7.2 |
| Oracle Linux · 7 | http-parser-devel | 0:2.7.1-8.el7_7.2 |
Vulnerabilities 1
-
Unscored —
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed