Oval Definition:	oval:org.opensuse.security:def:72888
Revision Date: 2020-12-01 Version: 1 Title: Security update for nodejs10 (Important) Description: This update for nodejs10 to version 10.18.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352). - Added support for chacha20-poly1305 for Authenticated encryption (AEAD). Non-security issues fixed: - Fixed wrong path in gypi files (bsc#1159812). Family: unix Class: patch Status: Reference(s): 1058115 1065600 1065729 1071995 1083548 1085030 1111666 1112178 1113956 1120163 1133021 1136666 1144333 1149792 1152148 1159352 1159812 1163524 1165629 1166965 1169790 1170232 1171558 1171688 1171988 1172073 1172108 1172247 1172418 1172428 1172871 1172872 1172873 1172963 1173060 1173485 1173798 1173954 1174003 1174026 1174070 1174205 1174387 1174484 1174547 1174549 1174550 1174625 1174658 1174685 1174689 1174699 1174734 1174757 1174771 1174840 1174841 1174843 1174844 1174845 1174852 1174873 1174904 1174926 1174968 1175062 1175063 1175064 1175065 1175066 1175067 1175112 1175127 1175128 1175149 1175199 1175213 1175228 1175232 1175284 1175393 1175394 1175396 1175397 1175398 1175399 1175400 1175401 1175402 1175403 1175404 1175405 1175406 1175407 1175408 1175409 1175410 1175411 1175412 1175413 1175414 1175415 1175416 1175417 1175418 1175419 1175420 1175421 1175422 1175423 1175440 1175493 1175515 1175518 1175526 1175550 1175654 1175666 1175667 1175668 1175669 1175670 1175691 1175767 1175768 1175769 1175770 1175771 1175772 1175786 1175873 1176069 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2020-10135 CVE-2020-14314 CVE-2020-14331 CVE-2020-14356 CVE-2020-14386 CVE-2020-16166 CVE-2020-1749 CVE-2020-24394 SUSE-SU-2020:0104-1 SUSE-SU-2020:2575-1 Platform(s): SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs10-10.18.0-1.15 is installed OR nodejs10-devel-10.18.0-1.15 is installed OR nodejs10-docs-10.18.0-1.15 is installed OR npm10-10.18.0-1.15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.56 is installed OR kernel-default-extra-4.12.14-197.56 is installed
BACK