HighFix available
November 2020 Security Releases
Node.js security updates address a denial-of-service issue involving DNS requests.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Security releases available Updates are now available for v12.x, v14.x and v15.x Node.js release lines for the following issues.
Node.js
Node.js v12.19.1 (LTS)
- Affected versions
- Versions 12.16.3 and higher on the 12.x release line
Impacts: Versions 12.16.3 and higher on the 12.x release line
Versions 14.13.0 and higher on the 14.x release lineVersions 14.13.0 and higher on the 14.x release line
All versions of the 15.x release lineAll versions of the 15.x release line
- Fixed versions
- Node.js v12.19.1 (LTS)
Downloads and release details Node.js v12.19.1 (LTS)
Node.js v14.15.1 (LTS)Node.js v14.15.1 (LTS)
Node.js v15.2.1 (Current)Node.js v15.2.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2020-8277
Denial of Service through DNS request (CVE-2020-8277)
Publisher severity
high
These releases will fix: One high severity issue
- Event
- #42815 · Revision 1
- Added to Heist Feed
- Publisher date