Oval Definition:oval:org.opensuse.security:def:67254
Revision Date:2021-09-03Version:1
Title:Security update for nodejs10 (Moderate)
Description:

This update for nodejs10 fixes the following issues:

- CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881). - CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917). - CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369). - CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
Family:unixClass:patch
Status:Reference(s):1173805
1175223
1178890
1178891
1188881
1188917
1189369
1189370
CVE-2020-27745
CVE-2020-27746
CVE-2020-7068
CVE-2021-22930
CVE-2021-22931
CVE-2021-22939
CVE-2021-3672
Platform(s):SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • php7-7.4.6-3.6 is installed
  • OR php7-embed-7.4.6-3.6 is installed
  • OR php7-firebird-7.4.6-3.6 is installed
  • OR php7-test-7.4.6-3.6 is installed
    • BACK