Bug 27316

Summary:	nodejs new security issues CVE-2020-8201, CVE-2020-825[12]
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	Joseph Wang <joequant>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	critical
Priority:	Normal	CC:	joequant
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:		CVE:
Status comment:

Description Nicolas Salguero 2020-09-24 09:26:01 CEST

Hi,

There are several security issues found in NodeJS before version 14.11.0:
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/

Best regards,

Nico.

Comment 1 Aurelien Oudelet 2020-09-24 18:06:28 CEST

Hi, thanks reporting this.

Assigning to registered maintainer.
(Packagers : please set to "Assigned" when you are working on this.)

Assignee: bugsquad => joequant
CC: (none) => joequant

Comment 2 Joseph Wang 2020-09-24 19:42:46 CEST

Pushing in 14.12.0

Comment 3 Nicolas Salguero 2020-09-25 12:30:43 CEST

Bumping release of v8 package solved the upload problem.

Resolution: (none) => FIXED
Status: NEW => RESOLVED