Oval Definition:	oval:org.opensuse.security:def:102271
Revision Date: 2021-12-06 Version: 1 Title: Security update for nodejs12 (Important) Description: This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers (bsc#1191601). - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body (bsc#1191602). - CVE-2021-37701: Fixed arbitrary file creation and overwrite in nodejs-tar (bsc#1190057). - CVE-2021-37712: Fixed arbitrary file creation and overwrite in nodejs-tar (bsc#1190056). - CVE-2021-37713: Fixed arbitrary code execution and file creation and overwrite in nodejs-tar (bsc#1190055). - CVE-2021-39134: Fixed symling following vulnerability in nodejs-arborist (bsc#1190054). - CVE-2021-39135: Fixed symling following vulnerability in nodejs-arborist (bsc#1190053). Family: unix Class: patch Status: Reference(s): 1174154 1190053 1190054 1190055 1190056 1190057 1191601 1191602 CVE-2020-15719 CVE-2021-22959 CVE-2021-22960 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 CVE-2021-39134 CVE-2021-39135 SUSE-SU-2020:2581-1 SUSE-SU-2021:3940-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Web Scripting 15 SP3 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Legacy 15 SP2 is installed AND Package Information openldap2-2.4.46-9.34.1 is installed OR openldap2-back-meta-2.4.46-9.34.1 is installed OR openldap2-back-perl-2.4.46-9.34.1 is installed OR openldap2-ppolicy-check-password-1.2-9.34.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Web Scripting 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information nodejs12-12.22.7-4.22.1 is installed OR nodejs12-devel-12.22.7-4.22.1 is installed OR nodejs12-docs-12.22.7-4.22.1 is installed OR npm12-12.22.7-4.22.1 is installed
BACK