critical Security update for nodejs12

SUSE-SLE-Module-Web-Scripting-12-2020-1606

This update for nodejs12 fixes the following issues: nodejs12 was updated to version 12.18.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-8172: Fixed am issue where TLS session reuse could have led to host certificate verification bypass (bsc#1172441). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). npm was updated to 6.13.6 - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype (bsc#1166916).

• Release Date
  Jun 11 2020
• References
  Bugzilla: 1172442, 1166916, 1172443, 1172441, 1172728
  CVEs: CVE-2020-7598, CVE-2020-8174, CVE-2020-11080, CVE-2020-8172
• Type
  security
• Severity
  critical

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.18.0-1.14.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.18.0-1.14.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.18.0-1.14.1 lock rpm

  npm12
  Package manager for Node.js

  12.18.0-1.14.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.18.0-1.14.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.18.0-1.14.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.18.0-1.14.1 lock rpm

  npm12
  Package manager for Node.js

  12.18.0-1.14.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.18.0-1.14.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.18.0-1.14.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.18.0-1.14.1 lock rpm

  npm12
  Package manager for Node.js

  12.18.0-1.14.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs12
  Evented I/O for V8 JavaScript

  12.18.0-1.14.1 lock rpm lock src

  nodejs12-devel
  Files needed for development of NodeJS platforms

  12.18.0-1.14.1 lock rpm

  nodejs12-docs
  Node.js API documentation

  12.18.0-1.14.1 lock rpm

  npm12
  Package manager for Node.js

  12.18.0-1.14.1 lock rpm