Oval Definition:	oval:org.opensuse.security:def:69257
Revision Date: 2021-12-06 Version: 1 Title: Security update for nodejs12 (Important) Description: This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers (bsc#1191601). - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body (bsc#1191602). - CVE-2021-37701: Fixed arbitrary file creation and overwrite in nodejs-tar (bsc#1190057). - CVE-2021-37712: Fixed arbitrary file creation and overwrite in nodejs-tar (bsc#1190056). - CVE-2021-37713: Fixed arbitrary code execution and file creation and overwrite in nodejs-tar (bsc#1190055). - CVE-2021-39134: Fixed symling following vulnerability in nodejs-arborist (bsc#1190054). - CVE-2021-39135: Fixed symling following vulnerability in nodejs-arborist (bsc#1190053). Family: unix Class: patch Status: Reference(s): 1128858 1129271 1129392 1132160 1132690 1134190 1134428 1135222 1136020 1136081 1138316 1140492 1171746 1172437 1190053 1190054 1190055 1190056 1190057 1191601 1191602 CVE-2018-1000199 CVE-2019-11068 CVE-2019-5419 CVE-2020-10757 CVE-2021-22959 CVE-2021-22960 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 CVE-2021-39134 CVE-2021-39135 SUSE-SU-2019:1973-1 SUSE-SU-2021:3940-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_37-default-4-2 is installed OR kernel-livepatch-SLE15-SP1_Update_10-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information rmt-server-2.3.1-3.3 is installed OR rmt-server-pubcloud-2.3.1-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs12-12.22.7-4.22.1 is installed OR nodejs12-devel-12.22.7-4.22.1 is installed OR nodejs12-docs-12.22.7-4.22.1 is installed OR npm12-12.22.7-4.22.1 is installed
BACK