critical Security update for nodejs10

SUSE-SLE-Module-Web-Scripting-12-2020-1575

This update for nodejs10 fixes the following issues: nodejs10 was updated to version 10.21.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). - CVE-2020-10531: Fixed an integer overflow in UnicodeString:doAppend() (bsc#1166844). npm was updated to 6.14.3 - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype (bsc#1166916).

• Release Date
  Jun 9 2020
• References
  Bugzilla: 1172443, 1172442, 1166916, 1166844
  CVEs: CVE-2020-7598, CVE-2020-10531, CVE-2020-8174, CVE-2020-11080
• Type
  security
• Severity
  critical

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.24.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.24.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.24.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.24.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.24.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.24.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.24.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.24.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.24.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.24.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.24.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.24.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.24.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.24.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.24.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.24.1 lock rpm