gpp_maybe Security update for nodejs16

SUSE-SLE-Module-Web-Scripting-15-SP3-2022-2551

This update for nodejs16 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022-32214: Fixed HTTP request smuggling due to improper delimiting of header fields (bsc#1201326). - CVE-2022-32215: Fixed HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (bsc#1201327). The following non-security bug was fixed: - Add buildtime version check to determine if we need patched openssl Requires: or already in upstream. (bsc#1192489)

• Release Date
  Jul 26 2022
• References
  Bugzilla: 1201325, 1201327, 1192489, 1201326, 1201328
  CVEs: CVE-2022-32214, CVE-2022-32212, CVE-2022-32213, CVE-2022-32215
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.3 x86_64

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.16.0-150300.7.6.2 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.16.0-150300.7.6.2 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.16.0-150300.7.6.2 lock rpm

  npm16
  Package manager for Node.js

  16.16.0-150300.7.6.2 lock rpm

Web and Scripting Module 15.3 s390x

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.16.0-150300.7.6.2 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.16.0-150300.7.6.2 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.16.0-150300.7.6.2 lock rpm

  npm16
  Package manager for Node.js

  16.16.0-150300.7.6.2 lock rpm

Web and Scripting Module 15.3 aarch64

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.16.0-150300.7.6.2 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.16.0-150300.7.6.2 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.16.0-150300.7.6.2 lock rpm

  npm16
  Package manager for Node.js

  16.16.0-150300.7.6.2 lock rpm

Web and Scripting Module 15.3 ppc64le

• Packages
  nodejs16
  Evented I/O for V8 JavaScript

  16.16.0-150300.7.6.2 lock rpm lock src

  nodejs16-devel
  Development headers for NodeJS 16.x

  16.16.0-150300.7.6.2 lock rpm

  nodejs16-docs
  Node.js API documentation

  16.16.0-150300.7.6.2 lock rpm

  npm16
  Package manager for Node.js

  16.16.0-150300.7.6.2 lock rpm