SUSE: 2023:592-1 bci/nodejs Security Update
Summary
Advisory ID: SUSE-SU-2023:674-1 Released: Wed Mar 8 14:29:04 2023 Summary: Security update for nodejs14 Type: security Severity: important
References
References : 1208481 1208487 CVE-2023-23918 CVE-2023-23920
1208481,1208487,CVE-2023-23918,CVE-2023-23920
This update for nodejs14 fixes the following issues:
Update to 14.21.3:
- CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481).
- CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487).
The following package changes have been done:
- nodejs14-14.21.3-150200.15.43.1 updated
- npm14-14.21.3-150200.15.43.1 updated