critical Security update for nodejs10

SUSE-SLE-Module-Web-Scripting-15-SP2-2020-1568

This update for nodejs10 fixes the following issues: nodejs10 was updated to version 10.21.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). - CVE-2020-10531: Fixed an integer overflow in UnicodeString:doAppend() (bsc#1166844). - Fixed an issue with openssl by adding getrandom syscall definition for all Linux platforms (bsc#1162117). npm was updated to 6.14.3 - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype (bsc#1166916).

• Release Date
  Jun 9 2020
• References
  Bugzilla: 1162117, 1166916, 1172442, 1166844, 1172443
  CVEs: CVE-2020-8174, CVE-2020-10531, CVE-2020-7598, CVE-2020-11080
• Type
  security
• Severity
  critical

cloud_download Downloads

Web and Scripting Module 15.2 x86_64

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.21.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.21.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.21.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.21.1 lock rpm

Web and Scripting Module 15.2 aarch64

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.21.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.21.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.21.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.21.1 lock rpm

Web and Scripting Module 15.2 s390x

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.21.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.21.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.21.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.21.1 lock rpm

Web and Scripting Module 15.2 ppc64le

• Packages
  nodejs10
  Evented I/O for V8 JavaScript

  10.21.0-1.21.1 lock rpm lock src

  nodejs10-devel
  Files needed for development of NodeJS platforms

  10.21.0-1.21.1 lock rpm

  nodejs10-docs
  Node.js API documentation

  10.21.0-1.21.1 lock rpm

  npm10
  Package manager for Node.js

  10.21.0-1.21.1 lock rpm