gpp_maybe
Security update for nodejs10
SUSE-SLE-Module-Web-Scripting-12-2022-570
This update for nodejs10 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). - CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514).
-
Release DateFeb 24 2022
-
ReferencesBugzilla: 1194514, 1192696, 1191962, 1191963, 1192153, 1192154
CVEs: CVE-2022-21824, CVE-2021-23343, CVE-2021-32804, CVE-2021-32803, CVE-2021-3918, CVE-2021-3807 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Web and Scripting Module 12 ppc64le
-
Packagesnodejs10
Evented I/O for V8 JavaScriptnodejs10-devel10.24.1-1.46.1 lock rpm lock src
Development headers for NodeJS 10.xnodejs10-docs10.24.1-1.46.1 lock rpm
Node.js API documentationnpm1010.24.1-1.46.1 lock rpm
Package manager for Node.js10.24.1-1.46.1 lock rpm
Web and Scripting Module 12 s390x
-
Packagesnodejs10
Evented I/O for V8 JavaScriptnodejs10-devel10.24.1-1.46.1 lock rpm lock src
Development headers for NodeJS 10.xnodejs10-docs10.24.1-1.46.1 lock rpm
Node.js API documentationnpm1010.24.1-1.46.1 lock rpm
Package manager for Node.js10.24.1-1.46.1 lock rpm
Web and Scripting Module 12 x86_64
-
Packagesnodejs10
Evented I/O for V8 JavaScriptnodejs10-devel10.24.1-1.46.1 lock rpm lock src
Development headers for NodeJS 10.xnodejs10-docs10.24.1-1.46.1 lock rpm
Node.js API documentationnpm1010.24.1-1.46.1 lock rpm
Package manager for Node.js10.24.1-1.46.1 lock rpm
Web and Scripting Module 12 aarch64
-
Packagesnodejs10
Evented I/O for V8 JavaScriptnodejs10-devel10.24.1-1.46.1 lock rpm lock src
Development headers for NodeJS 10.xnodejs10-docs10.24.1-1.46.1 lock rpm
Node.js API documentationnpm1010.24.1-1.46.1 lock rpm
Package manager for Node.js10.24.1-1.46.1 lock rpm