gpp_maybe Security update for nodejs14

SUSE-SLE-Module-Web-Scripting-12-2021-3886

This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: * deps: update llhttp to 2.1.4 Security fixes: - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body (bsc#1191602, CVE-2021-22960) Changes in 14.18.0: * buffer: + introduce Blob + add base64url encoding option * child_process: + allow options.cwd receive a URL + add timeout to spawn and fork + allow promisified exec to be cancel + add 'overlapped' stdio flag * dns: add "tries" option to Resolve options * fs: + allow empty string for temp directory prefix + allow no-params fsPromises fileHandle read + add support for async iterators to fsPromises.writeFile * http2: add support for sensitive headers * process: add 'worker' event * tls: allow reading data into a static buffer * worker: add setEnvironmentData/getEnvironmentData Changes in 14.17.6: * deps: upgrade npm to 6.14.15 which fixes a number of security issues (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712, bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134, bsc#1190053, CVE-2021-39135)

• Release Date
  Dec 2 2021
• References
  Bugzilla: 1191602, 1190053, 1190054, 1191601, 1190056, 1190055, 1190057
  CVEs: CVE-2021-22960, CVE-2021-37701, CVE-2021-22959, CVE-2021-39134, CVE-2021-39135, CVE-2021-37713, CVE-2021-37712
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 ppc64le

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.18.1-6.18.2 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.18.1-6.18.2 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.18.1-6.18.2 lock rpm

  npm14
  Package manager for Node.js

  14.18.1-6.18.2 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.18.1-6.18.2 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.18.1-6.18.2 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.18.1-6.18.2 lock rpm

  npm14
  Package manager for Node.js

  14.18.1-6.18.2 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.18.1-6.18.2 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.18.1-6.18.2 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.18.1-6.18.2 lock rpm

  npm14
  Package manager for Node.js

  14.18.1-6.18.2 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.18.1-6.18.2 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.18.1-6.18.2 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.18.1-6.18.2 lock rpm

  npm14
  Package manager for Node.js

  14.18.1-6.18.2 lock rpm