< back to search

gpp_maybe Security update for nodejs8

SUSE-SLE-Module-Web-Scripting-15-SP2-2021-2620

This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)

Release Date

Aug 5 2021
References

Bugzilla: 1187977, 1184450, 1187976, 1182620
CVEs: CVE-2021-27290, CVE-2021-23362, CVE-2020-7774, CVE-2021-22884
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Web and Scripting Module 15.2 aarch64

Packages

nodejs-common
Common files for the NodeJS ecosystem

2.0-3.2.1 lock rpm lock src

Web and Scripting Module 15.2 ppc64le

Packages

nodejs-common
Common files for the NodeJS ecosystem

2.0-3.2.1 lock rpm lock src

Web and Scripting Module 15.2 x86_64

Packages

nodejs-common
Common files for the NodeJS ecosystem

2.0-3.2.1 lock rpm lock src

Web and Scripting Module 15.2 s390x

Packages

nodejs-common
Common files for the NodeJS ecosystem

2.0-3.2.1 lock rpm lock src