Oval Definition:	oval:org.opensuse.security:def:91803
Revision Date: 2020-01-15 Version: 1 Title: Security update for nodejs10 (Important) Description: This update for nodejs10 to version 10.18.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352). - Added support for chacha20-poly1305 for Authenticated encryption (AEAD). Non-security issues fixed: - Fixed wrong path in gypi files (bsc#1159812). Family: unix Class: patch Status: Reference(s): 1149792 1159352 1159812 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 SUSE-SU-2020:0104-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs10-10.18.0-1.15.1 is installed OR nodejs10-devel-10.18.0-1.15.1 is installed OR nodejs10-docs-10.18.0-1.15.1 is installed OR npm10-10.18.0-1.15.1 is installed
BACK