gpp_maybe Security update for nodejs18

SUSE-SLE-Module-Web-Scripting-12-2023-715

This update for nodejs18 fixes the following issues: Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodejs crypto library (bsc#1208483). - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487). - CVE-2023-23936: Fixed protection against CRLF injection in host headers inside fetch API (bsc#1208485). - CVE-2023-24807: Fixed possible Regular Expression Denial of Service (ReDoS) via Headers.set() and Headers.append() methods (bsc#1208413).

• Release Date
  Mar 13 2023
• References
  Bugzilla: 1208485, 1208483, 1208413, 1208481, 1208487
  CVEs: CVE-2023-23936, CVE-2023-23918, CVE-2023-23919, CVE-2023-23920, CVE-2023-24807
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 ppc64le

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.14.2-8.6.2 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.14.2-8.6.2 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.14.2-8.6.2 lock rpm

  npm18
  Package manager for Node.js

  18.14.2-8.6.2 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.14.2-8.6.2 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.14.2-8.6.2 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.14.2-8.6.2 lock rpm

  npm18
  Package manager for Node.js

  18.14.2-8.6.2 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.14.2-8.6.2 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.14.2-8.6.2 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.14.2-8.6.2 lock rpm

  npm18
  Package manager for Node.js

  18.14.2-8.6.2 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  nodejs18
  Evented I/O for V8 JavaScript

  18.14.2-8.6.2 lock rpm lock src

  nodejs18-devel
  Development headers for NodeJS 18.x

  18.14.2-8.6.2 lock rpm

  nodejs18-docs
  Node.js API documentation

  18.14.2-8.6.2 lock rpm

  npm18
  Package manager for Node.js

  18.14.2-8.6.2 lock rpm