p PatchFirst

openSUSE-SU-2022:0113-1

openSUSE-SU-2022:0113-1 · Security update for nodejs12

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for nodejs12 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names (bsc#1194511). - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection (bsc#1194512). - CVE-2021-44533: Fixed incorrect handling of certificate subject and issuer fields (bsc#1194513). - CVE-2022-21824: Fixed prototype pollution via console.table properties (bsc#1194514).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • htmldoc SUSE:Package Hub 15 SP3

    Affected ranges
    • ECOSYSTEM: < 1.9.12-bp153.2.9.1

    Update to 1.9.12-bp153.2.9.1

  • htmldoc openSUSE:Leap 15.3

    Affected ranges
    • ECOSYSTEM: < 1.9.12-bp153.2.9.1

    Update to 1.9.12-bp153.2.9.1

  • nodejs12 openSUSE:Leap 15.3

    Affected ranges
    • ECOSYSTEM: < 12.22.9-4.25.1

    Update to 12.22.9-4.25.1

Original sources

Check your server →