Red Hat Security Advisory

RHSA-2020:1510

http-parser security update

Released 2020-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) http-parser-2.7.1-5.el7_6.1
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) http-parser-devel-2.7.1-5.el7_6.1
Red Hat Enterprise Linux Server EUS (v. 7.6) http-parser-2.7.1-5.el7_6.1, http-parser-2.7.1-5.el7_6.1.ppc
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) http-parser-devel-2.7.1-5.el7_6.1, http-parser-devel-2.7.1-5.el7_6.1.ppc
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) http-parser-2.7.1-5.el7_6.1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) http-parser-devel-2.7.1-5.el7_6.1

TI-2019-11704 CVE-2019-15605 · GHSA-rv6p-2q56-m955

HIGH 75

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57132 Published 2020-02-07 Fixed in 10.19.0, 12.15.0 +1 CWE-444