Oval Definition:oval:org.opensuse.security:def:119471
Revision Date:2022-08-19Version:1
Title:Security update for nodejs10 (Important)
Description:

This update for nodejs10 fixes the following issues:

- CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368). - CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960, CVE-2021-22959: Fixed multiple HTTP request smuggling issues in the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, bsc#1191602, bsc#1191601). - CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4 validation (bsc#1201328).
Family:unixClass:patch
Status:Reference(s):1188917
1189368
1191601
1191602
1201325
1201326
1201327
1201328
CVE-2021-22930
CVE-2021-22940
CVE-2021-22959
CVE-2021-22960
CVE-2022-32212
CVE-2022-32213
CVE-2022-32214
CVE-2022-32215
SUSE-SU-2022:2855-1
Platform(s):SUSE Linux Enterprise Server 15 SP2-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 15 SP2-LTSS is installed
  • AND Package Information
  • nodejs10-10.24.1-150000.1.47.1 is installed
  • OR nodejs10-devel-10.24.1-150000.1.47.1 is installed
  • OR nodejs10-docs-10.24.1-150000.1.47.1 is installed
  • OR npm10-10.24.1-150000.1.47.1 is installed
    • BACK