Oval Definition:	oval:org.opensuse.security:def:69270
Revision Date: 2021-07-14 Version: 1 Title: Security update for nodejs12 (Important) Description: This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read (bsc#1187973) - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info (bsc#1187977) - CVE-2021-27290: Regular Expression Denial of Service (bsc#1187976) - CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851) - CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852) - CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution (bsc#1184450) Family: unix Class: patch Status: Reference(s): 1058115 1103203 1112178 1136666 1160467 1160468 1171558 1173060 1175691 1176069 1183851 1183852 1184450 1187973 1187976 1187977 CVE-2019-14896 CVE-2019-14897 CVE-2020-14386 CVE-2020-7774 CVE-2021-22918 CVE-2021-23362 CVE-2021-27290 CVE-2021-3449 CVE-2021-3450 SUSE-SU-2020:2579-1 SUSE-SU-2021:2327-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP3 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_7-default-7-2 is installed OR kernel-livepatch-SLE15-SP1_Update_2-7-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.44 is installed OR kernel-azure-base-4.12.14-8.44 is installed OR kernel-azure-devel-4.12.14-8.44 is installed OR kernel-devel-azure-4.12.14-8.44 is installed OR kernel-source-azure-4.12.14-8.44 is installed OR kernel-syms-azure-4.12.14-8.44 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP3 is installed AND Package Information nodejs12-12.22.2-4.16.1 is installed OR nodejs12-devel-12.22.2-4.16.1 is installed OR nodejs12-docs-12.22.2-4.16.1 is installed OR npm12-12.22.2-4.16.1 is installed
BACK