shield
Security update for nodejs4, nodejs6
SUSE-SLE-Module-Web-Scripting-12-2017-1331
This update for nodejs4 and nodejs6 fixes the following issues: Security issues fixed: - CVE-2017-1000381: The c-ares function ares_parse_naptr_reply() could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. (bsc#1044946) - CVE-2017-11499: Disable V8 snapshots. The hashseed embedded in the snapshot is currently the same for all runs of the binary. This opens node up to collision attacks which could result in a Denial of Service. We have temporarily disabled snapshots until a more robust solution is found. (bsc#1048299) Non-security fixes: - GCC 7 compilation fixes for v8 backported and add missing ICU59 headers (bsc#1041282) - New upstream LTS release 6.11.1 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.11.1 - New upstream LTS release 6.11.0 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.11.0 - New upstream LTS release 6.10.3 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.10.3 - New upstream LTS release 6.10.2 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.10.2 - New upstream LTS release 6.10.1 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.10.1 - New upstream LTS release 6.10.0 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V6.md#6.10.0 - New upstream LTS release 4.8.4 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V4.md#4.8.4 - New upstream LTS release 4.8.3 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V4.md#4.8.3 - New upstream LTS release 4.8.2 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V4.md#4.8.2 - New upstream LTS release 4.8.1 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V4.md#4.8.1 - New upstream LTS release 4.8.0 * https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V4.md#4.8.0
-
Release DateAug 15 2017
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
Web and Scripting Module 12 aarch64
-
Packagesnodejs-common
Common files for the NodeJS ecosystemnodejs41.0-2.1 lock rpm lock src
Evented I/O for V8 JavaScriptnodejs4-devel4.8.4-15.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs4-docs4.8.4-15.5.1 lock rpm
Node.js API documentationnodejs64.8.4-15.5.1 lock rpm
Evented I/O for V8 JavaScriptnodejs6-devel6.11.1-11.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs6-docs6.11.1-11.5.1 lock rpm
Node.js API documentationnpm46.11.1-11.5.1 lock rpm
Package manager for Node.jsnpm64.8.4-15.5.1 lock rpm
Package manager for Node.js6.11.1-11.5.1 lock rpm
Web and Scripting Module 12 ppc64le
-
Packagesnodejs-common
Common files for the NodeJS ecosystemnodejs41.0-2.1 lock rpm lock src
Evented I/O for V8 JavaScriptnodejs4-devel4.8.4-15.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs4-docs4.8.4-15.5.1 lock rpm
Node.js API documentationnodejs64.8.4-15.5.1 lock rpm
Evented I/O for V8 JavaScriptnodejs6-devel6.11.1-11.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs6-docs6.11.1-11.5.1 lock rpm
Node.js API documentationnpm46.11.1-11.5.1 lock rpm
Package manager for Node.jsnpm64.8.4-15.5.1 lock rpm
Package manager for Node.js6.11.1-11.5.1 lock rpm
Web and Scripting Module 12 x86_64
-
Packagesnodejs-common
Common files for the NodeJS ecosystemnodejs41.0-2.1 lock rpm lock src
Evented I/O for V8 JavaScriptnodejs4-devel4.8.4-15.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs4-docs4.8.4-15.5.1 lock rpm
Node.js API documentationnodejs64.8.4-15.5.1 lock rpm
Evented I/O for V8 JavaScriptnodejs6-devel6.11.1-11.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs6-docs6.11.1-11.5.1 lock rpm
Node.js API documentationnpm46.11.1-11.5.1 lock rpm
Package manager for Node.jsnpm64.8.4-15.5.1 lock rpm
Package manager for Node.js6.11.1-11.5.1 lock rpm
Web and Scripting Module 12 s390x
-
Packagesnodejs-common
Common files for the NodeJS ecosystemnodejs61.0-2.1 lock rpm lock src
Evented I/O for V8 JavaScriptnodejs6-devel6.11.1-11.5.1 lock rpm lock src
Files needed for development of NodeJS platformsnodejs6-docs6.11.1-11.5.1 lock rpm
Node.js API documentationnpm66.11.1-11.5.1 lock rpm
Package manager for Node.js6.11.1-11.5.1 lock rpm