Oval Definition:oval:org.opensuse.security:def:110973
Revision Date:2021-07-19Version:1
Title:Security update for nodejs12 (Important)
Description:

This update for nodejs12 fixes the following issues:

- update to 12.22.2: - CVE-2021-22918: Out of bounds read (bsc#1187973) - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info (bsc#1187977) - CVE-2021-27290: Regular Expression Denial of Service (bsc#1187976) - CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851) - CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852) - CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution (bsc#1184450)

This update was imported from the SUSE:SLE-15-SP2:Update update project.
Family:unixClass:patch
Status:Reference(s):1183851
1183852
1184450
1187973
1187976
1187977
CVE-2020-7774
CVE-2021-22918
CVE-2021-23362
CVE-2021-27290
CVE-2021-3449
CVE-2021-3450
openSUSE-SU-2021:1059-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • nodejs12-12.22.2-lp152.3.15.1 is installed
  • OR nodejs12-devel-12.22.2-lp152.3.15.1 is installed
  • OR nodejs12-docs-12.22.2-lp152.3.15.1 is installed
  • OR npm12-12.22.2-lp152.3.15.1 is installed
    • BACK