[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2022:0704-1 -- SLES nodejs8, npm8, nodejs-common

ID: oval:org.secpod.oval:def:89046015Date: (C)2022-03-11   (M)2023-11-10
Class: PATCHFamily: unix




This update for nodejs8 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe . - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite . - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite . - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema . - CVE-2021-3807: Fixed regular expression denial of service matching ANSI escape codes in node-ansi-regex .

Platform:
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP1
Product:
nodejs8
npm8
nodejs-common
Reference:
SUSE-SU-2022:0704-1
CVE-2021-23343
CVE-2021-32803
CVE-2021-32804
CVE-2021-3807
CVE-2021-3918
CVE    5
CVE-2021-23343
CVE-2021-32804
CVE-2021-32803
CVE-2021-3918
...
CPE    4
cpe:/o:suse:suse_linux_enterprise_server:15
cpe:/o:suse:suse_linux_enterprise_server:15:sp1
cpe:/a:nodejs:nodejs8
cpe:/o:suse:suse_linux_enterprise_server:15:sp2
...

© SecPod Technologies