gpp_maybe Security update for nodejs16

SUSE-SLE-Module-Web-Scripting-12-2024-731

This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (bsc#1219993). * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014). * CVE-2024-24758: ignore proxy-authorization header (bsc#1220017). * CVE-2024-24806: fix improper domain lookup that potentially leads to SSRF attacks (bsc#1219724).

• Release Date
  Feb 29 2024
• References
  Bugzilla: 1220014, 1220017, 1220053, 1219993, 1219997
  CVEs: CVE-2024-24758, CVE-2023-46809, CVE-2024-22019, CVE-2024-24806, CVE-2024-22025
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 x86_64

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.20.2-8.39.1 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.20.2-8.39.1 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.20.2-8.39.1 lock rpm

  npm16
  Package manager for Node.js

  16.20.2-8.39.1 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.20.2-8.39.1 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.20.2-8.39.1 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.20.2-8.39.1 lock rpm

  npm16
  Package manager for Node.js

  16.20.2-8.39.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.20.2-8.39.1 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.20.2-8.39.1 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.20.2-8.39.1 lock rpm

  npm16
  Package manager for Node.js

  16.20.2-8.39.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.20.2-8.39.1 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.20.2-8.39.1 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.20.2-8.39.1 lock rpm

  npm16
  Package manager for Node.js

  16.20.2-8.39.1 lock rpm