gpp_maybe Security update for nodejs18

SUSE-SLE-Module-Web-Scripting-12-2023-3356

This update for nodejs18 fixes the following issues: Update to LTS version 18.17.1 (security fixes): - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156). - CVE-2023-32559: Fixed permissions policies bypass via process.binding (bsc#1214154). - CVE-2023-30589: Fixed HTTP Request Smuggling via Empty headers separated by CR (bsc#1212582).

• Release Date
  Aug 18 2023
• References
  Bugzilla: 1214150, 1214154, 1214156
  CVEs: CVE-2023-32559, CVE-2023-32006, CVE-2023-32002
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 ppc64le

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.17.1-8.12.1 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.17.1-8.12.1 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.17.1-8.12.1 lock rpm

  npm18
  Package manager for Node.js

  18.17.1-8.12.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.17.1-8.12.1 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.17.1-8.12.1 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.17.1-8.12.1 lock rpm

  npm18
  Package manager for Node.js

  18.17.1-8.12.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.17.1-8.12.1 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.17.1-8.12.1 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.17.1-8.12.1 lock rpm

  npm18
  Package manager for Node.js

  18.17.1-8.12.1 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.17.1-8.12.1 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.17.1-8.12.1 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.17.1-8.12.1 lock rpm

  npm18
  Package manager for Node.js

  18.17.1-8.12.1 lock rpm