critical Security update for nodejs8

SUSE-SLE-Module-Web-Scripting-15-SP2-2020-2800

This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype (bsc#1166916) - CVE-2020-15095: Fixed information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686). - Add Require for nodejs8 when intalling npm8 (bsc#1172728)

• Release Date
  Sep 30 2020
• References
  Bugzilla: 1166916, 1172686, 1172442, 1172443, 1172728, 1173937
  CVEs: CVE-2020-11080, CVE-2020-7598, CVE-2020-15095, CVE-2020-8174
• Type
  security
• Severity
  critical

cloud_download Downloads

Web and Scripting Module 15.2 aarch64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.17.0-10.3.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.17.0-10.3.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.17.0-10.3.1 lock rpm

  npm8
  Package manager for Node.js

  8.17.0-10.3.1 lock rpm

Web and Scripting Module 15.2 ppc64le

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.17.0-10.3.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.17.0-10.3.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.17.0-10.3.1 lock rpm

  npm8
  Package manager for Node.js

  8.17.0-10.3.1 lock rpm

Web and Scripting Module 15.2 s390x

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.17.0-10.3.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.17.0-10.3.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.17.0-10.3.1 lock rpm

  npm8
  Package manager for Node.js

  8.17.0-10.3.1 lock rpm

Web and Scripting Module 15.2 x86_64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.17.0-10.3.1 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.17.0-10.3.1 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.17.0-10.3.1 lock rpm

  npm8
  Package manager for Node.js

  8.17.0-10.3.1 lock rpm