Skip to content
Heist/ feed
UnratedFix available

Node.js 12.15.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 12.15.0 (LTS) is a security release that fixes three vulnerabilities and makes HTTP parsing stricter.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release. Vulnerabilities fixed: CVE-2019-15606: HTTP header values do not have trailing OWS trimmed. CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header. CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.

Node.js

Node.js 12.15.0 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
12.15.0
Node.js 12.15.0 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2019-15606
CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
CVE-2019-15605
CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
CVE-2019-15604
CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.

Publisher severity

No explicit severity was extracted.

Event
#46730 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement