gpp_maybe Security update for nodejs14

SUSE-SLE-Module-Web-Scripting-12-2023-3306

This update for nodejs14 fixes the following issues: - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156). - CVE-2023-32559: Fixed permissions policies bypass via process.binding (bsc#1214154). - CVE-2023-30581: Fixed mainModule.proto bypass (bsc#1212574). - CVE-2023-30590: Fixed missing DiffieHellman key generation (bsc#1212583). - CVE-2023-30589: Fixed HTTP Request Smuggling via Empty headers separated by CR (bsc#1212582).

• Release Date
  Aug 14 2023
• References
  Bugzilla: 1214154, 1212574, 1214150, 1212583, 1212582, 1214156
  CVEs: CVE-2023-30590, CVE-2023-30581, CVE-2023-32559, CVE-2023-32002, CVE-2023-30589, CVE-2023-32006
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.21.3-6.46.1 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.21.3-6.46.1 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.21.3-6.46.1 lock rpm

  npm14
  Package manager for Node.js

  14.21.3-6.46.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.21.3-6.46.1 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.21.3-6.46.1 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.21.3-6.46.1 lock rpm

  npm14
  Package manager for Node.js

  14.21.3-6.46.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.21.3-6.46.1 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.21.3-6.46.1 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.21.3-6.46.1 lock rpm

  npm14
  Package manager for Node.js

  14.21.3-6.46.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs14
  Evented I/O for V8 JavaScript

  14.21.3-6.46.1 lock rpm lock src

  nodejs14-devel
  Development headers for NodeJS 14.x

  14.21.3-6.46.1 lock rpm

  nodejs14-docs
  Node.js API documentation

  14.21.3-6.46.1 lock rpm

  npm14
  Package manager for Node.js

  14.21.3-6.46.1 lock rpm