Ubuntu
nodejs package

nodejs 0.10.25~dfsg2-2ubuntu1.2 source package in Ubuntu

Changelog

nodejs (0.10.25~dfsg2-2ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: CRLF injection vulnerability
    - debian/patches/CVE-2016-5325.patch: Previously, the reason argument
      passed to ServerResponse#writeHead was not being properly validated. One
      could pass CRLFs which could lead to http response splitting. This
      commit changes the behavior to throw an error in the event any invalid
      characters are included in the reason.
      lib/http.js
    - CVE-2016-5325

 -- Mike Salvatore <email address hidden>  Tue, 07 Aug 2018 10:42:55 -0400

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe web
Trusty security universe web

Downloads

File Size SHA-256 Checksum
nodejs_0.10.25~dfsg2.orig.tar.gz 6.0 MiB 3e48428e8e3611446c00554676c3a6cc24b358a88d3e216e3de1f8c17fb07f3b
nodejs_0.10.25~dfsg2-2ubuntu1.2.debian.tar.gz 50.7 KiB 0389b349c972a7d634d4c9369114a3e922e292503ba819f7ed84d0d575895acb
nodejs_0.10.25~dfsg2-2ubuntu1.2.dsc 2.4 KiB 7247b01721403d907a34aaa01983809c13c3a78313a8271fc2c72f8d6f636f44

View changes file

Binary packages built by this source

nodejs: evented I/O for V8 javascript

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 Node.js is bundled with several useful libraries to handle server
 tasks:
 .
 System, Events, Standard I/O, Modules, Timers, Child Processes, POSIX,
 HTTP, Multipart Parsing, TCP, DNS, Assert, Path, URL, Query Strings.

nodejs-dbg: evented I/O for V8 javascript (debug)

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 This package contains the debugging symbols.

nodejs-dbgsym: debug symbols for package nodejs

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 Node.js is bundled with several useful libraries to handle server
 tasks:
 .
 System, Events, Standard I/O, Modules, Timers, Child Processes, POSIX,
 HTTP, Multipart Parsing, TCP, DNS, Assert, Path, URL, Query Strings.

nodejs-dev: evented I/O for V8 javascript (development files)

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 This package is needed to build plugins.

nodejs-dev-dbgsym: debug symbols for package nodejs-dev

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 This package is needed to build plugins.

nodejs-legacy: evented I/O for V8 javascript (legacy symlink)

 Node.js is a platform built on Chrome's JavaScript runtime for easily
 building fast, scalable network applications. Node.js uses an
 event-driven, non-blocking I/O model that makes it lightweight and
 efficient, perfect for data-intensive real-time applications that run
 across distributed devices.
 .
 This package contains a symlink for legacy Node.js code requiring
 binary to be /usr/bin/node (not /usr/bin/nodejs as provided in Debian).
 .
 No other Debian packages should depend on this package. For more
 information, see
 <http://lists.debian.org/debian-devel-announce/2012/07/msg00002.html>