openSUSE: 2021:2354-1 important: nodejs14
Description
This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2354=1
Package List
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs14-14.17.2-5.12.1 nodejs14-debuginfo-14.17.2-5.12.1 nodejs14-debugsource-14.17.2-5.12.1 nodejs14-devel-14.17.2-5.12.1 npm14-14.17.2-5.12.1 - openSUSE Leap 15.3 (noarch): nodejs14-docs-14.17.2-5.12.1
References
https://www.suse.com/security/cve/CVE-2020-7774.html https://www.suse.com/security/cve/CVE-2021-22918.html https://www.suse.com/security/cve/CVE-2021-23362.html https://www.suse.com/security/cve/CVE-2021-27290.html https://bugzilla.suse.com/1184450 https://bugzilla.suse.com/1187973 https://bugzilla.suse.com/1187976 https://bugzilla.suse.com/1187977