openSUSE: 2021:1060-1 important: nodejs14
Description
This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2020-7774: y18n Prototype Pollution (bsc#1184450) This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1060=1
Package List
- openSUSE Leap 15.2 (noarch): nodejs14-docs-14.17.2-lp152.11.1 - openSUSE Leap 15.2 (x86_64): nodejs14-14.17.2-lp152.11.1 nodejs14-debuginfo-14.17.2-lp152.11.1 nodejs14-debugsource-14.17.2-lp152.11.1 nodejs14-devel-14.17.2-lp152.11.1 npm14-14.17.2-lp152.11.1
References
https://www.suse.com/security/cve/CVE-2020-7774.html https://www.suse.com/security/cve/CVE-2021-22918.html https://www.suse.com/security/cve/CVE-2021-23362.html https://www.suse.com/security/cve/CVE-2021-27290.html https://bugzilla.suse.com/1184450 https://bugzilla.suse.com/1187973 https://bugzilla.suse.com/1187976 https://bugzilla.suse.com/1187977