tocsin

Debian/nodejs: high 8.1

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TL

Action: Upgrade nodejs to 12.20.1~dfsg-1 or later.

Affected

introducedfixedlast affected
012.20.1~dfsg-1-

Fixed versions

12.20.1~dfsg-1

Sources

published · modified · JSON