gpp_maybe
Security update for nodejs16
SUSE-SLE-Module-Web-Scripting-15-SP4-2023-608
This update for nodejs16 fixes the following issues: Update to LTS version 16.19.1: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodejs crypto library (bsc#1208483). - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487). - CVE-2023-23936: Fixed protection against CRLF injection in host headers inside fetch API (bsc#1208485). - CVE-2023-24807: Fixed possible Regular Expression Denial of Service (ReDoS) via Headers.set() and Headers.append() methods (bsc#1208413). Bug fixes: - Workaround for failing openssl-nodejs test (bsc#1205568).
-
Release DateMar 3 2023
-
ReferencesBugzilla: 1205568, 1208483, 1208485, 1208481, 1208487, 1208413
CVEs: CVE-2023-23919, CVE-2023-24807, CVE-2023-23936, CVE-2023-23920, CVE-2023-23918 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Web and Scripting Module 15.4 s390x
-
Packagesnodejs16
Evented I/O for V8 JavaScriptnodejs16-devel16.19.1-150400.3.15.1 lock rpm lock src
Development headers for NodeJS 16.xnodejs16-docs16.19.1-150400.3.15.1 lock rpm
Node.js API documentationnpm1616.19.1-150400.3.15.1 lock rpm
Package manager for Node.js16.19.1-150400.3.15.1 lock rpm
Web and Scripting Module 15.4 x86_64
-
Packagesnodejs16
Evented I/O for V8 JavaScriptnodejs16-devel16.19.1-150400.3.15.1 lock rpm lock src
Development headers for NodeJS 16.xnodejs16-docs16.19.1-150400.3.15.1 lock rpm
Node.js API documentationnpm1616.19.1-150400.3.15.1 lock rpm
Package manager for Node.js16.19.1-150400.3.15.1 lock rpm
Web and Scripting Module 15.4 aarch64
-
Packagesnodejs16
Evented I/O for V8 JavaScriptnodejs16-devel16.19.1-150400.3.15.1 lock rpm lock src
Development headers for NodeJS 16.xnodejs16-docs16.19.1-150400.3.15.1 lock rpm
Node.js API documentationnpm1616.19.1-150400.3.15.1 lock rpm
Package manager for Node.js16.19.1-150400.3.15.1 lock rpm
Web and Scripting Module 15.4 ppc64le
-
Packagesnodejs16
Evented I/O for V8 JavaScriptnodejs16-devel16.19.1-150400.3.15.1 lock rpm lock src
Development headers for NodeJS 16.xnodejs16-docs16.19.1-150400.3.15.1 lock rpm
Node.js API documentationnpm1616.19.1-150400.3.15.1 lock rpm
Package manager for Node.js16.19.1-150400.3.15.1 lock rpm