Lucene search
SuseOPENSUSE-SU-2019:1907-1HistoryAug 15, 2019 - 12:00 a.m.
Security update for nodejs8 (important)
2019-08-1500:00:00
lists.opensuse.org
44
EPSS
0.002
Percentile
62.2%
An update that solves one vulnerability and has one errata
is now available.
Description:
This update for nodejs8 fixes the following issues:
Security issue fixed:
- CVE-2019-13173: Fixed a potential file overwrite via hardlink in
fstream.DirWriter() (bsc#1140290).
Non-security issue fixed:
- Backported fixes for OpenSSL 1.1.1 from nodejs8 (bsc#1134209).
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.1:
zypper in -t patch openSUSE-2019-1907=1
-
openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-1907=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.1 | i586 | < - openSUSE Leap 15.1 (i586 x86_64): | - openSUSE Leap 15.1 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 15.1 | x86_64 | < - openSUSE Leap 15.1 (i586 x86_64): | - openSUSE Leap 15.1 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.1 | noarch | < - openSUSE Leap 15.1 (noarch): | - openSUSE Leap 15.1 (noarch):.noarch.rpm | |
| openSUSE Leap | 15.0 | i586 | < - openSUSE Leap 15.0 (i586 x86_64): | - openSUSE Leap 15.0 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 15.0 | x86_64 | < - openSUSE Leap 15.0 (i586 x86_64): | - openSUSE Leap 15.0 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.0 | noarch | < - openSUSE Leap 15.0 (noarch): | - openSUSE Leap 15.0 (noarch):.noarch.rpm |
Related
redhatcve
redhatcve
CVE-2019-13173
2020-04-06 10:58:31
ubuntu
ubuntu
npm/fstream vulnerability
2019-09-05 00:00:00
fstream vulnerability
2021-03-15 00:00:00
nessus
nessus
SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:2181-1)
2019-08-20 00:00:00
SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:2099-1)
2019-08-12 00:00:00
openSUSE Security Update : nodejs8 (openSUSE-2019-1907)
2019-08-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:2081-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for nodejs10 (openSUSE-SU-2019:1846-1)
2020-01-09 00:00:00
openSUSE: Security Advisory for nodejs8 (openSUSE-SU-2019:1907-1)
2019-08-16 00:00:00
prion
prion
Design/Logic Flaw
2019-07-02 20:15:00
veracode
veracode
Arbitrary File Overwrite
2019-05-16 00:34:09
github
github
Arbitrary File Overwrite in fstream
2019-05-30 17:19:34
osv
osv
Arbitrary File Overwrite in fstream
2019-05-30 17:19:34
CVE-2019-13173
2019-07-02 20:15:11
node-fstream vulnerability
2021-03-15 22:50:59
suse
suse
Security update for nodejs10 (important)
2019-08-12 00:00:00
githubexploit
githubexploit
Exploit for Link Following in Fstream Project Fstream
2020-12-01 09:18:57
cve
cve
CVE-2019-13173
2019-07-02 20:15:11
ubuntucve
ubuntucve
CVE-2019-13173
2019-07-02 00:00:00
nodejs
nodejs
Arbitrary File Overwrite
2019-05-15 14:22:26
nvd
nvd
CVE-2019-13173
2019-07-02 20:15:11
debiancve
debiancve
CVE-2019-13173
2019-07-02 20:15:11
cvelist
cvelist
CVE-2019-13173
2019-07-02 19:26:05
