[Buildroot] [PATCH] package/nodejs: security bump to version 12.19.1

Peter Korsgaard peter at korsgaard.com
Thu Dec 24 08:46:26 UTC 2020


>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > Fixes the following security issue:
 > - CVE-2020-8277: Denial of Service through DNS request (High).  A Node.js
 >   application that allows an attacker to trigger a DNS request for a host of
 >   their choice could trigger a Denial of Service by getting the application
 >   to resolve a DNS record with a larger number of responses.

 > https://nodejs.org/en/blog/release/v12.19.1/

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed to 2020.02.x, 2020.08.x and 2020.11.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list