nodejs4: two vulnerabilities
| Package(s): | nodejs4 | CVE #(s): | CVE-2016-5325 CVE-2016-7099 | ||||||||||||||||||||||||||||
| Created: | October 7, 2016 | Updated: | October 28, 2016 | ||||||||||||||||||||||||||||
| Description: | From the SUSE bug reports:
CVE-2016-5325: An unspecified low-severity Node.js HTTP processing vulnerability was found and will be fixed in latest update. Details are currently embargoed until new releases are available. CVE-2016-7099: This is a high severity defect that would allow a malicious TLS server to serve an invalid wildcard certificate for its hostname and be improperly validated by a Node.js client. This is due to a flaw in the validation of *. in the wildcard name string. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||