Oval Definition:oval:org.opensuse.security:def:118762
Revision Date:2022-07-18Version:1
Title:Security update for nodejs14 (Important)
Description:

This update for nodejs14 fixes the following issues:

- CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022-32214: Fixed HTTP request smuggling due to improper delimiting of header fields (bsc#1201326). - CVE-2022-32215: Fixed HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (bsc#1201327).
Family:unixClass:patch
Status:Reference(s):1201325
1201326
1201327
1201328
CVE-2022-32212
CVE-2022-32213
CVE-2022-32214
CVE-2022-32215
SUSE-SU-2022:2425-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS is installed
  • AND Package Information
  • nodejs14-14.20.0-150200.15.34.1 is installed
  • OR nodejs14-devel-14.20.0-150200.15.34.1 is installed
  • OR nodejs14-docs-14.20.0-150200.15.34.1 is installed
  • OR npm14-14.20.0-150200.15.34.1 is installed
  • BACK