[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253928

 
 

909

 
 

198006

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2021:2353-1 -- SLES nodejs10, npm10

ID: oval:org.secpod.oval:def:89045099Date: (C)2021-07-26   (M)2024-01-23
Class: PATCHFamily: unix




This update for nodejs10 fixes the following issues: Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read - CVE-2021-27290: ssri Regular Expression Denial of Service - CVE-2021-23362: hosted-git-info Regular Expression Denial of Service - CVE-2020-7774: y18n Prototype Pollution - CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT - CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing - reduce memory footprint of test-worker-stdio

Platform:
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
Product:
nodejs10
npm10
Reference:
SUSE-SU-2021:2353-1
CVE-2020-7774
CVE-2021-22918
CVE-2021-23362
CVE-2021-27290
CVE-2021-3449
CVE-2021-3450
CVE    6
CVE-2020-7774
CVE-2021-23362
CVE-2021-22918
CVE-2021-27290
...
CPE    4
cpe:/a:npm10:npm10
cpe:/o:suse:suse_linux_enterprise_server:15
cpe:/o:suse:suse_linux_enterprise_server:15:sp1
cpe:/a:nodejs:nodejs10
...

© SecPod Technologies